netty vulnerabilities (Ubuntu)
125 vulnerabilities.
nettyUbuntuNetty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang8.7 HighnettyUbuntuNetty codec-http2: Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass6.9 MediumnettyUbuntuNetty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service6.9 MediumnettyUbuntuNetty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation6.3 MediumnettyUbuntuNetty: TOCTOU in OcspServerCertificateValidator7.4 HighnettyUbuntuNetty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator7.4 HighnettyUbuntuNetty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks7.4 HighnettyUbuntuNetty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)7.5 HighnettyUbuntuNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state6.5 MediumnettyUbuntuNetty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled8.3 HighnettyUbuntuNetty has a Security Control Bypass via CORS Short-Circuit Failure6.5 MediumnettyUbuntuNetty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion8.7 HighnettyUbuntuNetty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion8.7 HighnettyUbuntuNetty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation7.5 HighnettyUbuntuNetty SPDY SETTINGS frame count materializes unbounded settings map7.5 HighnettyUbuntuNetty susceptible to HTTP/2 Reset Attack with different on-the-wire signature6.9 MediumnettyUbuntuNetty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted5.3 MediumnettyUbuntuNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 HighnettyUbuntuNetty's wrapping plain trust manager silently disables hostname verification7.5 HighnettyUbuntuNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 HighnettyUbuntunetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 MediumnettyUbuntuNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 HighnettyUbuntuNetty has Insufficient Bailiwick Validation for NS Records8.7 HighnettyUbuntuNetty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced5.3 MediumnettyUbuntuNetty: SCTP reassembly nests buffers without bound7.5 HighnettyUbuntuNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 HighnettyUbuntuNetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port6.8 MediumnettyUbuntuNetty: Unix-socket fd receive leaks descriptors when peer sends two at once4.0 MediumnettyUbuntuNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 HighnettyUbuntuNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 HighnettyUbuntuNetty: Denial of Service via Unbounded Headers in StompSubframeDecoder7.5 HighnettyUbuntuNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 HighnettyUbuntuNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 HighnettyUbuntuNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 HighnettyUbuntuNetty: CRLF Injection in Netty Redis Codec Encoder6.8 MediumnettyUbuntuNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 MediumnettyUbuntuNetty: HttpClientCodec response desynchronization7.3 HighnettyUbuntuNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 MediumnettyUbuntuNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 MediumnettyUbuntuNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 HighnettyUbuntuNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 LownettyUbuntuNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 MediumnettyUbuntuNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 HighnettyUbuntuNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 HighnettyUbuntuNetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 MediumnettyUbuntuNetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 MediumnettyUbuntuNetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 MediumnettyUbuntuNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 LownettyUbuntuNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 HighnettyUbuntuDenial of Service attack on windows app using Netty5.5 Medium- Show moreLoading…