io.netty:netty-handler vulnerabilities (TuxCare)
80 vulnerabilities.
io.netty:netty-handlerTuxCareNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Mediumio.netty:netty-handlerTuxCareNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Highio.netty:netty-handlerTuxCareNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Lowio.netty:netty-handlerTuxCareNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumio.netty:netty-handlerTuxCareNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Highio.netty:netty-handlerTuxCareNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Highio.netty:netty-handlerTuxCareNetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 Mediumio.netty:netty-handlerTuxCareNetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 Mediumio.netty:netty-handlerTuxCareNetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 Mediumio.netty:netty-handlerTuxCareNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Lowio.netty:netty-handlerTuxCareNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Highio.netty:netty-handlerTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-handlerTuxCareSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Highio.netty:netty-handlerTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-handlerTuxCareNetty HttpPostRequestDecoder can OOM5.3 Mediumio.netty:netty-handlerTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highio.netty:netty-handlerTuxCarenetty-handler SniHandler 16MB allocation6.5 Mediumio.netty:netty-handlerTuxCareNetty vulnerable to HTTP Response splitting from assigning header value iterator6.5 Mediumio.netty:netty-handlerTuxCareHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumio.netty:netty-handlerTuxCareLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumio.netty:netty-handlerTuxCareHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumio.netty:netty-handlerTuxCareSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highio.netty:netty-handlerTuxCareBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Highio.netty:netty-handlerTuxCarePossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumio.netty:netty-handlerTuxCarePossible request smuggling in HTTP/2 due missing validation5.9 Mediumio.netty:netty-handlerTuxCareLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumio.netty:netty-handlerTuxCareHTTP Request Smuggling in Netty9.1 Criticalio.netty:netty-handlerTuxCareHTTP Request Smuggling in Netty7.5 Highio.netty:netty-handlerTuxCareHTTP Request Smuggling in Netty7.5 High