3292 matches found
Moderate: Red Hat Security Advisory: Red Hat build of Quarkus 3.20.3 release and security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.13.2 release and security update
Red Hat AMQ Broker 7.13.2 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
The vulnerability of the Netty network programming framework, related to deficiencies in HTTP request processing, allows attackers to carry out attacks by replacing HTTP requests with malicious content.
The vulnerability of the Netty network programming framework is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out attacks by replacing HTTP requests with malicious content...
EUVD-2020-0475
Malware in sbrugna...
EUVD-2021-0647
Malware in sbrugna...
EUVD-2019-0710
Malware in sbrugna...
EUVD-2020-0303
Malware in sbrugna...
EUVD-2020-0524
Malware in sbrugna...
EUVD-2021-0719
Malware in sbrugna...
EUVD-2020-0302
Malware in sbrugna...
EUVD-2020-0500
Malware in sbrugna...
EUVD-2019-0705
Malware in sbrugna...
EUVD-2019-0708
Malware in sbrugna...
EUVD-2020-0308
Malware in sbrugna...
EUVD-2021-0535
Malware in sbrugna...
User Impersonation
Overview Akka.Remote is a .NET port of the popular Akka project from the Scala / Java community. Affected versions of this package are vulnerable to User Impersonation due to improper implementation of certificate-based authentication in the akka.remote.dot-netty.tcp transport. An attacker can ga...
HTTP Request Smuggling
io.netty, netty-codec-http is vulnerable to HTTP Request Smuggling. The vulnerability is due to incorrectly accepting standalone newline characters LF as a chunk-size line terminator instead of requiring CRLF per HTTP/1.1 standards, which allows an attacker to craft malicious requests that are...