The vulnerability of the Netty network programming framework lies in the lack of proper interpretation of HTTP requests, which allows attackers to compromise data integrity.

🗓️ 20 Jan 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

Netty HTTP request parsing flaw allows remote attacker to compromise data integrity.

Reporter	Title	Published	Views	Family All 170
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tier CVE-2021-21409	16 Jul 202103:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Netty	25 Jun 202100:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring has patched several open source dependencies	18 Dec 202115:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis	6 Sep 202408:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	6 Jul 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: Netty Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-21409)	30 Jul 202105:02	–	ibm
IBM Security Bulletins	Security Bulletin: Netty Vulnerabilites 4.0.37	3 Apr 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a number of security vulnerabilities in Netty, which is used by Guardium (CVE-2021-21290, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2021-37137)	27 May 202217:58	–	ibm

Vulners

Node

OR

apache nettyRange<4.1.61

apache cassandraMatch4.1.3

Source	Link
github	www.github.com/netty/netty/commit/b0fa4d5aab4215f3c22ce6123dd8dd5f38dc0432
github	www.github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21409
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-21409
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
goslinux	www.goslinux.fssp.gov.ru/2726972/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
web	www.web.nvd.nist.gov/view/vuln/detail

15 Sep 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 35.9

EPSS0.04935

Netty framework Hypertext Transfer Protocol Request parsing flaw Data integrity risk Remote exploitation