GHSA-FF2W-CQ2G-WV5F HTTP Request Smuggling in Netty

🗓️ 21 Feb 2020 18:55:50Reported by GoogleType

osv🔗 osv.dev👁 42 Views

HTTP Request Smuggling in Netty allows smuggling due to mishandling of Transfer-Encoding and Content-Length headers

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.	7 May 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Integration Tester HTTP/TCP Proxy component in Rational Test Virtualization Server and Rational Test Workbench affected by Netty vulnerabilities (CVE-2020-7238, CVE-2019-16869, CVE-2019-20445, CVE-2019-20444)	5 Mar 202011:02	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Operations Analytics Predictive Insights (CVE-2020-7238)	28 Feb 202016:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis	6 Sep 202408:22	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)	26 May 202015:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	6 Jul 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by a Netty vulnerability	9 Oct 202019:48	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)	26 May 202015:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect IBM Netcool Agile Service Manager (CVE-2020-7238)	24 Jul 202015:22	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-7238
github	www.github.com/jdordonezn/CVE-2020-72381/issues/1
github	www.github.com/netty/netty/issues/9861
github	www.github.com/netty/netty/pull/9865
debian	www.debian.org/security/2021/dsa-4885
netty	www.netty.io/news
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46
lists	www.lists.debian.org/debian-lts-announce/2020/09/msg00003.html
lists	www.lists.debian.org/debian-lts-announce/2020/02/msg00018.html
lists	www.lists.debian.org/debian-lts-announce/2020/02/msg00017.html

14 Mar 2024 05:20Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17.5

EPSS0.03617