io.netty:netty-codec-smtp vulnerabilities (TuxCare)
77 vulnerabilities.
io.netty:netty-codec-smtpTuxCareNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Mediumio.netty:netty-codec-smtpTuxCareNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Highio.netty:netty-codec-smtpTuxCareNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Lowio.netty:netty-codec-smtpTuxCareNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumio.netty:netty-codec-smtpTuxCareNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Highio.netty:netty-codec-smtpTuxCareNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Highio.netty:netty-codec-smtpTuxCareNetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 Mediumio.netty:netty-codec-smtpTuxCareNetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 Mediumio.netty:netty-codec-smtpTuxCareNetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 Mediumio.netty:netty-codec-smtpTuxCareNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Lowio.netty:netty-codec-smtpTuxCareNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Highio.netty:netty-codec-smtpTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-codec-smtpTuxCareSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Highio.netty:netty-codec-smtpTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-codec-smtpTuxCareNetty HttpPostRequestDecoder can OOM5.3 Mediumio.netty:netty-codec-smtpTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highio.netty:netty-codec-smtpTuxCarenetty-handler SniHandler 16MB allocation6.5 Mediumio.netty:netty-codec-smtpTuxCareHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumio.netty:netty-codec-smtpTuxCareLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumio.netty:netty-codec-smtpTuxCareHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumio.netty:netty-codec-smtpTuxCareSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highio.netty:netty-codec-smtpTuxCareBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Highio.netty:netty-codec-smtpTuxCarePossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumio.netty:netty-codec-smtpTuxCarePossible request smuggling in HTTP/2 due missing validation5.9 Mediumio.netty:netty-codec-smtpTuxCareLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumio.netty:netty-codec-smtpTuxCareHTTP Request Smuggling in Netty9.1 Criticalio.netty:netty-codec-smtpTuxCareHTTP Request Smuggling in Netty7.5 High