CVE-2021-21409

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty io.netty:netty-codec-http2 before version 4.1.61.Final there is a vulnerability that enables request smuggling. The...

ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.clarity.codeartifact:ai.clarity.codeartifact.gradle.plugin (>=0.0.1, <=0.0.10) +10825 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.60.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.0.1, =0.0.14, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

CVE-2021-21409: Inconsistent Interpretation of HTTP Requests

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty io.netty:netty-codec-http2 before version 4.1.61.Final there is a vulnerability that enables request smuggling. The...

Citrix Endpoint Management (aka XenMobile Server) 10.12.0 Rolling Patch 7

Package name:xms10.12.0.10714.bin For: XenMobile Server 10.12.0 Deployment type: On-premises only Replaces:xms10.12.0.10102.bin, xms10.12.0.10204.bin, xms10.12.0.10324.bin, xms10.12.0.10417.bin, xms10.12.0.10539.bin, and xms10.12.0.10613.bin Date:March, 2021 Languages supported:English US Readme...

[ASA-202103-16] dotnet-runtime: multiple issues

Arch Linux Security Advisory ASA-202103-16 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2021-1721 CVE-2021-1723 CVE-2021-24112 Package : dotnet-runtime Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1449 Summary ======= Th...

[ASA-202103-17] dotnet-sdk: multiple issues

Arch Linux Security Advisory ASA-202103-17 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2021-1721 CVE-2021-1723 CVE-2021-24112 Package : dotnet-sdk Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1449 Summary ======= The...

Security fix for the ALT Linux 9 package node version 14.16.0-alt1

14.16.0-alt1 built March 16, 2021 Vitaly Lipatov in task 267572 Feb. 23, 2021 Vitaly Lipatov - new version 14.16.0 with rpmrb script - CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion - CVE-2021-22884: DNS rebinding in --inspect...

Important: Red Hat Security Advisory: rh-nodejs12-nodejs security update

An update for rh-nodejs12-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: rh-nodejs14-nodejs security update

An update for rh-nodejs14-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nodejs: HTTP2 'unknownProtocol' cause DoS by resource exhaustion

A flaw was found in nodejs. When too many connection attempts with an 'unknownProtocol' are established a leak of file descriptors can occur leading to a potential denial of service. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and...

Important: Red Hat Security Advisory: rh-nodejs10-nodejs security update

An update for rh-nodejs10-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CentOS 8 : nodejs:10 (CESA-2021:0735)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:0735 advisory. - nodejs: HTTP2 'unknownProtocol' cause DoS by resource exhaustion CVE-2021-22883 - nodejs: DNS rebinding in --inspect CVE-2021-22884 Note that Nessus...

FreeBSD : Node.js -- February 2021 Security Releases (2f3cd69e-7dee-11eb-b92e-0022489ad614)

Node.js reports : HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion Critical CVE-2021-22883 Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file...

CVE-2021-21295

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty io.netty:netty-codec-http2 before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a...

ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.clarity.codeartifact:ai.clarity.codeartifact.gradle.plugin (>=0.0.1, <=0.0.10) +10652 more potentially affected by CVE-2021-21295 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.59.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.0.1, =0.0.14, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.clarity.codeartifact:ai.clarity.codeartifact.gradle.plugin (>=0.0.1, <=0.0.10) +10652 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.59.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.0.1, =0.0.14, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.clarity.codeartifact:ai.clarity.codeartifact.gradle.plugin (>=0.0.1, <=0.0.10) +10652 more potentially affected by CVE-2021-21295 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.59.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.0.1, =0.0.14, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

CVE-2021-21295

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty io.netty:netty-codec-http2 before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a...

CVE-2021-21295: Inconsistent Interpretation of HTTP Requests

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty io.netty:netty-codec-http2 before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a...

Important: Red Hat Security Advisory: nodejs:14 security and bug fix update

An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...