CVE-2021-21295

🗓️ 09 Mar 2021 18:35:19Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 471 Views

Netty (io.netty:netty-codec-http2) before version 4.1.60.Final allows HTTP/2 request smuggling

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Netty	25 Jun 202100:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis	6 Sep 202408:22	–	ibm
IBM Security Bulletins	Security Bulletin: Netty Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-21295)	16 Jan 202608:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	2 Aug 202515:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: Netty Vulnerabilites 4.0.37	3 Apr 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a number of security vulnerabilities in Netty, which is used by Guardium (CVE-2021-21290, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2021-37137)	27 May 202217:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities affect IBM Netcool Agile Service Manager	25 Nov 202108:58	–	ibm
IBM Security Bulletins	Security Bulletin: Netty Vulnerabilities Affect the B2B API of IBM Sterling B2B Integrator	5 Oct 202121:05	–	ibm

NVD

Vulners

Node

netty nettyRange<4.1.60

Node

netapp oncommand_api_servicesMatch-

netapp oncommand_workflow_automationMatch-

Node

debian debian_linuxMatch10.0

Node

quarkus quarkusRange≤1.13.7

Node

apache kuduRange<1.16.0

apache zookeeperMatch3.5.9

Node

oracle communications_cloud_native_core_policyMatch1.14.0

[
  {
    "product": "io.netty:netty-codec-http2",
    "vendor": "netty",
    "versions": [
      {
        "status": "affected",
        "version": "< 4.1.60.Final"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/rbadcbcb50195f00bbd196403865ced521ca70787999583c07be38d0e%40%3Cnotifications.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r6a122c25e352eb134d01e7f4fc4d345a491c5ee9453fef6fc754d15b%40%3Ccommits.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r22b2f34447d71c9a0ad9079b7860323d5584fb9b40eb42668c21eaf1%40%3Cissues.hbase.apache.org%3E
lists	www.lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4%40%3Cdev.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r5470456cf1409a99893ae9dd57439799f6dc1a60fda90e11570f66fe%40%3Cnotifications.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r22adb45fe902aeafcd0a1c4db13984224a667676c323c66db3af38a1%40%3Ccommits.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r04a3e0d9f53421fb946c60cc54762b7151dc692eb4e39970a7579052%40%3Ccommits.servicecomb.apache.org%3E
lists	www.lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e%40%3Cissues.flink.apache.org%3E
lists	www.lists.apache.org/thread.html/r96ce18044880c33634c4b3fcecc57b8b90673c9364d63eba00385523%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898%40%3Cdev.flink.apache.org%3E

21 Nov 2024 05:47Current

6.7Medium risk

Vulners AI Score6.7

CVSS 22.6

CVSS 3.15.9

EPSS0.00377

CWE-444