GHSA-Q8F2-HXQ5-CP4H Absent Input Validation in BinaryHttpParser

Summary BinaryHttpParser does not properly validate input values thus giving attackers almost complete control over the HTTP requests constructed from the parsed output. Attackers can abuse several issues individually to perform various injection attacks including HTTP request smuggling, desync...

PT-2024-28960

Name of the Vulnerable Software and Affected Versions netty incubator codec.bhttp versions prior to 0.0.13.Final Description The BinaryHttpParser class does not properly validate input values, giving attackers almost complete control over the HTTP requests constructed from the parsed output...

CVE-2024-40642: Improper Input Validation

The netty incubator codec.bhttp is a java language binary http parser. In affected versions the BinaryHttpParser class does not properly validate input values thus giving attackers almost complete control over the HTTP requests constructed from the parsed output. Attackers can abuse several issue...