HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | netty | < 1:4.1.45-1 | netty_1:4.1.45-1_all.deb |
Debian | 11 | all | netty | < 1:4.1.45-1 | netty_1:4.1.45-1_all.deb |
Debian | 10 | all | netty | < 1:4.1.33-1+deb10u2 | netty_1:4.1.33-1+deb10u2_all.deb |
Debian | 999 | all | netty | < 1:4.1.45-1 | netty_1:4.1.45-1_all.deb |
Debian | 13 | all | netty | < 1:4.1.45-1 | netty_1:4.1.45-1_all.deb |