Input validation

🗓️ 13 Dec 2022 07:15:00Reported by PRIOn knowledge baseType

Netty project prior to 4.1.86.Final allows HTTP Response Splitting via DefaultHttpHeadesr.set with iterator of values, patched in 4.1.86.Fina

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Netty (CVE-2022-41915)	29 Mar 202303:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM Process Mining . CVE-2022-41881	5 May 202314:17	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Netty HTTP response splitting (CVE-2022-41915)	14 Feb 202319:18	–	ibm
IBM Security Bulletins	Security Bulletin: Netty is vulnerable to CVE-2022-41915 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202319:55	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to denial of service and response splitting due to vulnerabilities in Netty (CVE-2022-41881 and CVE-2022-41915)	2 Mar 202315:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to HTTP response splitting due to Netty (CVE-2022-41915)	30 Mar 202319:17	–	ibm
IBM Security Bulletins	Security Bulletin: DataPower Operations Dashboard vulnerable to multiple CVEs	12 Apr 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	29 Sep 202318:56	–	ibm

Source	Link
github	www.github.com/netty/netty/security/advisories/GHSA-hh82-3pmq-7frp
github	www.github.com/netty/netty/commit/fe18adff1c2b333acb135ab779a3b9ba3295a1c4
github	www.github.com/netty/netty/pull/12760
github	www.github.com/netty/netty/issues/13084
lists	www.lists.debian.org/debian-lts-announce/2023/01/msg00008.html
debian	www.debian.org/security/2023/dsa-5316
security	www.security.netapp.com/advisory/ntap-20230113-0004/

01 Mar 2023 15:09Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.00497