org.apache.nifi:nifi-hbase_1_1_2-client-service (>=1.9.0, <=1.14.0), org.apache.nifi:nifi-hbase_1_1_2-client-service-nar (>=1.9.0, <=1.14.0) +11 more potentially affected by CVE-2019-20444 via io.netty:netty (3.6.9.final)

io.netty:netty MAVEN version 3.6.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.apache.nifi:nifi-hbase112-client-service =1.9.0, =1.9.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =2.3.22.final, =2.3.22.final,...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2019-20444 via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

HTTP Request Smuggling in Netty

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."...

GHSA-CQQJ-4P63-RRMM HTTP Request Smuggling in Netty

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."...

ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.eloquent:theseus (0.3.0) +11380 more potentially affected by CVE-2019-20444 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.43.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =1.4.6, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

org.atmosphere.nettosphere.samples:nettosphere-chat (2.3.1), org.atmosphere.nettosphere.samples:nettosphere-games (2.3.1) +5 more potentially affected by CVE-2019-20444 via io.netty:netty (3.10.2.final)

io.netty:netty MAVEN version 3.10.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.atmosphere.nettosphere.samples:nettosphere-chat 2.3.1 - org.atmosphere.nettosphere.samples:nettosphere-games 2.3.1 -...

org.reactivemongo:play2-reactivemongo_2.10 (0.11.4.play23), org.reactivemongo:play2-reactivemongo_2.11 (>=0.11.4.play23, <=0.11.4.play24) +8 more potentially affected by CVE-2019-20444 via io.netty:netty (3.8.2.final)

io.netty:netty MAVEN version 3.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.reactivemongo:play2-reactivemongo2.10 0.11.4.play23 - org.reactivemongo:play2-reactivemongo2.11 =0.11.4.play23,...

com.kolibrifx.mq:mq-provider-lettuce (1.0.0), com.lambdaworks:lettuce (2.1.0) potentially affected by CVE-2019-20444 via io.netty:netty (3.4.0.beta1)

io.netty:netty MAVEN version 3.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.kolibrifx.mq:mq-provider-lettuce 1.0.0 - com.lambdaworks:lettuce 2.1.0 Source cves: CVE-2019-20444 Source advisory:...

com.netiq:websockify (>=1.0, <=1.5), me.normanmaurer.niosmtp:niosmtp (0.1) +1 more potentially affected by CVE-2019-20444 via io.netty:netty (3.3.0.final)

io.netty:netty MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.netiq:websockify =1.0, =1.6.1, =1.6.2 Source cves: CVE-2019-20444 Source advisory: OSV:GHSA-CQQJ-4P63-RRMM...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2019-20445 via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

com.twitter:ostrich (2.3.0), com.twitter:ostrich_2.8.0 (>=2.2.6, <=2.2.10) +8 more potentially affected by CVE-2019-20445 via org.jboss.netty:netty (3.1.5.ga)

org.jboss.netty:netty MAVEN version 3.1.5.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - com.twitter:ostrich 2.3.0 - com.twitter:ostrich2.8.0 =2.2.6, =2.2.11, =1.3.0, =1.3.2, =1.3.4 Source cves:...

HTTP Request Smuggling in Netty

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header...

com.github.mheath:nats-client (0.4), com.github.mheath:nats-client-spring (0.4) +56 more potentially affected by CVE-2019-20445 via io.netty:netty (3.5.3.final)

io.netty:netty MAVEN version 3.5.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.github.mheath:nats-client 0.4 - com.github.mheath:nats-client-spring 0.4 -...

com.kolibrifx.mq:mq-provider-lettuce (1.0.0), com.lambdaworks:lettuce (2.1.0) potentially affected by CVE-2019-20445 via io.netty:netty (3.4.0.beta1)

io.netty:netty MAVEN version 3.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.kolibrifx.mq:mq-provider-lettuce 1.0.0 - com.lambdaworks:lettuce 2.1.0 Source cves: CVE-2019-20445 Source advisory:...

com.netiq:websockify (>=1.0, <=1.5), me.normanmaurer.niosmtp:niosmtp (0.1) +1 more potentially affected by CVE-2019-20445 via io.netty:netty (3.3.0.final)

io.netty:netty MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.netiq:websockify =1.0, =1.6.1, =1.6.2 Source cves: CVE-2019-20445 Source advisory: OSV:GHSA-P2V9-G2QV-P635...

com.barchart.http:barchart-http-handlers (>=1.0.6, <=1.0.7), com.barchart.http:barchart-http-server (>=1.0.6, <=1.0.7) potentially affected by CVE-2019-20445 via io.netty:netty (4.0.0.alpha6)

io.netty:netty MAVEN version 4.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.barchart.http:barchart-http-handlers =1.0.6, =1.0.6, =1.0.7 Source cves: CVE-2019-20445 Source advisory:...

com.github.spullara.redis:netty (0.3), fr.inria.eventcloud:eventcloud-api (1.0.0) +11 more potentially affected by CVE-2019-20445 via io.netty:netty (3.5.1.final)

io.netty:netty MAVEN version 3.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.github.spullara.redis:netty 0.3 - fr.inria.eventcloud:eventcloud-api 1.0.0 - org.apache.camel:camel-ahc 2.10.0 -...

org.hornetq.examples.jms:hornetq-jms-examples-common (>=2.3.13.final, <=2.3.19.final), org.hornetq:hornetq-commons (>=2.3.13.final, <=2.3.19.final) +5 more potentially affected by CVE-2019-20445 via io.netty:netty (3.6.7.final)

io.netty:netty MAVEN version 3.6.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.hornetq.examples.jms:hornetq-jms-examples-common =2.3.13.final, =2.3.13.final, =2.3.13.final, =2.3.13.final, =2.3.13.fina...

com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (>=1.2.2, <=1.2.3), com.googlecode.protobuf-rpc-pro:protobuf-streamer-pro (>=1.2.2, <=1.2.3) +39 more potentially affected by CVE-2019-20445 via io.netty:netty (3.4.6.final)

io.netty:netty MAVEN version 3.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex =1.2.2, =1.2.2, =1.2.3 - net.databinder:unfiltered-netty-server2.8.1...

Debian: Security Advisory (DLA-2110-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...