HTTP Request Smuggling in Netty

🗓️ 21 Feb 2020 18:55:50Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 202 Views

Netty 4.1.43.Final HTTP Request Smuggling vulnerabilit

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.	7 May 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Integration Tester HTTP/TCP Proxy component in Rational Test Virtualization Server and Rational Test Workbench affected by Netty vulnerabilities (CVE-2020-7238, CVE-2019-16869, CVE-2019-20445, CVE-2019-20444)	5 Mar 202011:02	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Operations Analytics Predictive Insights (CVE-2020-7238)	28 Feb 202016:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis	6 Sep 202408:22	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)	26 May 202015:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by a Netty vulnerability	9 Oct 202019:48	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)	26 May 202015:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect IBM Netcool Agile Service Manager (CVE-2020-7238)	24 Jul 202015:22	–	ibm
IBM Security Bulletins	Security Bulletin: Netty security vulnerabilities on IBM Watson Machine Learning Server	3 May 202115:05	–	ibm

Vulners

Node

io.netty netty-handlerRange4.1.43–4.1.44maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-7238
github	www.github.com/jdordonezn/CVE-2020-72381/issues/1
github	www.github.com/netty/netty/issues/9861
github	www.github.com/netty/netty/pull/9865
access	www.access.redhat.com/errata/RHSA-2020:0497
lists	www.lists.debian.org/debian-lts-announce/2020/02/msg00017.html
lists	www.lists.debian.org/debian-lts-announce/2020/02/msg00018.html
netty	www.netty.io/news/
access	www.access.redhat.com/errata/RHSA-2020:0567
access	www.access.redhat.com/errata/RHSA-2020:0601

01 Feb 2023 05:02Current

0.8Low risk

Vulners AI Score0.8

CVSS 25

CVSS 3.17.5

EPSS0.01498

CWE-444