io.netty:netty-handler-proxy vulnerabilities (TuxCare)
71 vulnerabilities.
io.netty:netty-handler-proxyTuxCareNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Mediumio.netty:netty-handler-proxyTuxCareNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Highio.netty:netty-handler-proxyTuxCareNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Lowio.netty:netty-handler-proxyTuxCareNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumio.netty:netty-handler-proxyTuxCareNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Highio.netty:netty-handler-proxyTuxCareNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Highio.netty:netty-handler-proxyTuxCareNetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 Mediumio.netty:netty-handler-proxyTuxCareNetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 Mediumio.netty:netty-handler-proxyTuxCareNetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 Mediumio.netty:netty-handler-proxyTuxCareNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Lowio.netty:netty-handler-proxyTuxCareNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Highio.netty:netty-handler-proxyTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-handler-proxyTuxCareSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Highio.netty:netty-handler-proxyTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-handler-proxyTuxCareNetty HttpPostRequestDecoder can OOM5.3 Mediumio.netty:netty-handler-proxyTuxCarenetty-handler SniHandler 16MB allocation6.5 Mediumio.netty:netty-handler-proxyTuxCareLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumio.netty:netty-handler-proxyTuxCareHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumio.netty:netty-handler-proxyTuxCareSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highio.netty:netty-handler-proxyTuxCareBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 High