Lucene search

CVE-2021-21295

🗓️ 22 Aug 2021 13:33:44Reported by redhat.comType

Netty (io.netty:netty-codec-http2) vulnerability enables HTTP/2 request smuggling due to unvalidated Content-Length heade

Reporter	Title	Published	Views	Family All 100
Veracode	HTTP Request Smuggling	10 Mar 202105:52	–	veracode
Veracode	HTTP Request Smuggling	31 Mar 202104:38	–	veracode
NVD	CVE-2021-21295	9 Mar 202119:15	–	nvd
NVD	CVE-2021-21409	30 Mar 202115:15	–	nvd
Github Security Blog	Possible request smuggling in HTTP/2 due missing validation	9 Mar 202118:49	–	github
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM Cloud Private (CVE-2021-21295)	4 Jan 202220:36	–	ibm
IBM Security Bulletins	Security Bulletin: Netty Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-21295)	30 Jul 202105:02	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud TierCVE-(2021-21295)	15 Jul 202115:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Netty	25 Jun 202100:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in Netty shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library (CVE-2021-21290, CVE-2021-21295, CVE-2021-21409)	17 Jun 202108:12	–	ibm

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21295
github	www.github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Aug 2021 13:44Current

1.3Low risk

Vulners AI Score1.3

CVSS22.6

CVSS35.9

EPSS0.162