io.netty:netty-codec-xml vulnerabilities (TuxCare)
70 vulnerabilities.
io.netty:netty-codec-xmlTuxCareNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Mediumio.netty:netty-codec-xmlTuxCareNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Highio.netty:netty-codec-xmlTuxCareNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Lowio.netty:netty-codec-xmlTuxCareNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumio.netty:netty-codec-xmlTuxCareNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Highio.netty:netty-codec-xmlTuxCareNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Highio.netty:netty-codec-xmlTuxCareNetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 Mediumio.netty:netty-codec-xmlTuxCareNetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 Mediumio.netty:netty-codec-xmlTuxCareNetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 Mediumio.netty:netty-codec-xmlTuxCareNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Lowio.netty:netty-codec-xmlTuxCareNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Highio.netty:netty-codec-xmlTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-codec-xmlTuxCareSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Highio.netty:netty-codec-xmlTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-codec-xmlTuxCareNetty HttpPostRequestDecoder can OOM5.3 Mediumio.netty:netty-codec-xmlTuxCarenetty-handler SniHandler 16MB allocation6.5 Mediumio.netty:netty-codec-xmlTuxCareHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumio.netty:netty-codec-xmlTuxCareSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highio.netty:netty-codec-xmlTuxCarePossible request smuggling in HTTP/2 due missing validation5.9 Mediumio.netty:netty-codec-xmlTuxCareLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Medium