io.netty:netty-testsuite-native-image-client-runtime-init vulnerabilities (TuxCare)
62 vulnerabilities.
io.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: epoll transport denial of service via RST on half-closed TCP connection7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Memory Leak in DNS Record Decoder via Malformed Domain Names5.3 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Denial of Service in XmlFrameDecoder via CPU Exhaustion7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder5.7 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: STOMP CONNECT Frame Header Injection6.5 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address5.5 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang8.7 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty codec-http2: Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass6.9 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service6.9 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation6.3 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: TOCTOU in OcspServerCertificateValidator7.4 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator7.4 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks7.4 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state6.5 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled8.3 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty has a Security Control Bypass via CORS Short-Circuit Failure6.5 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion8.7 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion8.7 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty SPDY SETTINGS frame count materializes unbounded settings map7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty susceptible to HTTP/2 Reset Attack with different on-the-wire signature6.9 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted5.3 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty's wrapping plain trust manager silently disables hostname verification7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCarenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty has Insufficient Bailiwick Validation for NS Records8.7 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced5.3 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: SCTP reassembly nests buffers without bound7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port6.8 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Unix-socket fd receive leaks descriptors when peer sends two at once4.0 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Denial of Service via Unbounded Headers in StompSubframeDecoder7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Resource exhaustion in MqttDecoder5.3 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: CRLF Injection in Netty Redis Codec Encoder6.8 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HttpClientCodec response desynchronization7.3 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: Lz4FrameDecoder resource exhaustion7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Mediumio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Highio.netty:netty-testsuite-native-image-client-runtime-initTuxCareNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Low- Show olderLoading…