PT-2021-7984

🗓️ 01 Feb 2021 00:00:00Reported by Positive TechnologiesType

Android 8.1–11 may accept a cert for the wrong domain due to a verifyHostName flaw in the hostname verifier.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.	7 May 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance	10 Aug 202609:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Netty Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	17 Sep 202612:36	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to domain certificate spoofing due to the OkHostnameVerifier.java package ( CVE-2021-0341)	18 Jun 202513:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java	8 Jul 202420:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is is susceptible to multiple Netty vulnerabilities CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585	21 Jul 202621:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.	22 Sep 202607:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by multiple vulnerability in the netty-codec-http library that could allow an attacker to exploit integer overflow conditions when processing chunked HTTP requests(CVE-2026-42581, CVE-2026-42584).	31 Jul 202620:44	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2018-20200
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-7254
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-50020
osv	www.osv.dev/vulnerability/ghsa-v8h7-rr48-vmmv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-27315
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48924
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41881
osv	www.osv.dev/vulnerability/ghsa-m4cv-j2px-7723
osv	www.osv.dev/vulnerability/CVE-2026-42587
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-6763

18 Sep 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 25 - 7.8

CVSS 3.17.3 - 9.1

EPSS0.0087

SSVC