netty vulnerabilities (openSUSE)
103 vulnerabilities.
nettyopenSUSENetty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted5.3 MediumnettyopenSUSENetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 HighnettyopenSUSENetty's wrapping plain trust manager silently disables hostname verification7.5 HighnettyopenSUSENetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 HighnettyopenSUSEnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 MediumnettyopenSUSENetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 HighnettyopenSUSENetty has Insufficient Bailiwick Validation for NS Records8.7 HighnettyopenSUSENetty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced5.3 MediumnettyopenSUSENetty: SCTP reassembly nests buffers without bound7.5 HighnettyopenSUSENetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 HighnettyopenSUSENetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port6.8 MediumnettyopenSUSENetty: Unix-socket fd receive leaks descriptors when peer sends two at once4.0 MediumnettyopenSUSENetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 HighnettyopenSUSENetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 HighnettyopenSUSENetty: Denial of Service via Unbounded Headers in StompSubframeDecoder7.5 HighnettyopenSUSENetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 HighnettyopenSUSENetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 HighnettyopenSUSENetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 HighnettyopenSUSENetty: Resource exhaustion in MqttDecoder5.3 MediumnettyopenSUSENetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 HighnettyopenSUSENetty: CRLF Injection in Netty Redis Codec Encoder6.8 MediumnettyopenSUSENetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 MediumnettyopenSUSENetty: HttpClientCodec response desynchronization7.3 HighnettyopenSUSENetty: Lz4FrameDecoder resource exhaustion7.5 HighnettyopenSUSENetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 MediumnettyopenSUSENetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 MediumnettyopenSUSENetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 HighnettyopenSUSENetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 LownettyopenSUSENetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 MediumnettyopenSUSENetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 HighnettyopenSUSENetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 HighnettyopenSUSENetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 MediumnettyopenSUSENetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 MediumnettyopenSUSENetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 MediumnettyopenSUSENetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 LownettyopenSUSENetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 HighnettyopenSUSEDenial of Service attack on windows app using Netty5.5 MediumnettyopenSUSESslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 HighnettyopenSUSEDenial of Service attack on windows app using Netty5.5 MediumnettyopenSUSENetty HttpPostRequestDecoder can OOM5.3 MediumnettyopenSUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighnettyopenSUSEnetty-handler SniHandler 16MB allocation6.5 MediumnettyopenSUSENetty vulnerable to HTTP Response splitting from assigning header value iterator6.5 MediumnettyopenSUSEHAProxyMessageDecoder Stack Exhaustion DoS5.3 MediumnettyopenSUSELocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 MediumnettyopenSUSEHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 MediumnettyopenSUSESnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 HighnettyopenSUSEBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 HighnettyopenSUSEPossible request smuggling in HTTP/2 due missing validation of content-length5.9 MediumnettyopenSUSEPossible request smuggling in HTTP/2 due missing validation5.9 Medium- Show moreLoading…