The vulnerabilities of the Transfer-Encoding and Content-Length headers in the Netty network programming framework, related to deficiencies in HTTP request interpretation, allow attackers to compromise data integrity.

🗓️ 20 Jan 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Netty Transfer-Encoding and Content-Length handling flaws enable attackers to compromise data integrity.

Reporter	Title	Published	Views	Family All 121
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.	7 May 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Integration Tester HTTP/TCP Proxy component in Rational Test Virtualization Server and Rational Test Workbench affected by Netty vulnerabilities (CVE-2020-7238, CVE-2019-16869, CVE-2019-20445, CVE-2019-20444)	5 Mar 202011:02	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Operations Analytics Predictive Insights (CVE-2020-7238)	28 Feb 202016:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis	6 Sep 202408:22	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)	26 May 202015:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by a Netty vulnerability	9 Oct 202019:48	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)	26 May 202015:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect IBM Netcool Agile Service Manager (CVE-2020-7238)	24 Jul 202015:22	–	ibm
IBM Security Bulletins	Security Bulletin: Netty security vulnerabilities on IBM Watson Machine Learning Server	3 May 202115:05	–	ibm

Vulners

Node

apache nettyRange≤4.1.43

OR

red_hat red_hat_amqMatch7.4.3

Source	Link
github	www.github.com/jdordonezn/CVE-2020-72381/issues/1
github	www.github.com/netty/netty/issues/9861
github	www.github.com/netty/netty/pull/9865
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-7238
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-7238
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
access	www.access.redhat.com/security/cve/cve-2020-7238
ubuntu	www.ubuntu.com/security/CVE-2020-7238
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/

04 Sep 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25

CVSS 37.5

EPSS0.03617

Netty Transfer Encoding Content Length Hypertext Protocol Requests Data Integrity Security Vulnerability