CVE-2024-29025

A flaw was found in the io.netty:netty-codec-http package. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling issues due to the accumulation of data in the HttpPostRequestDecoder. The decoder cumulates bytes in the undecodedChunk buffer until ...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34762 more potentially affected by CVE-2024-29025 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.107.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.1, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.19.0, =0.29.0, =0.0.1, =0.0.14, =0.1.14 - ai.evolv:ascend-sdk 0.5.0 - ai.grakn.kgms:client 1.4.3 and more Source cves: CVE-2024-29025 Source advisory: MEND:CVE-2024-29025...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34762 more potentially affected by CVE-2024-29025 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.107.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.1, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.19.0, =0.29.0, =0.0.1, =0.0.14, =0.1.14 - ai.evolv:ascend-sdk 0.5.0 - ai.grakn.kgms:client 1.4.3 and more Source cves: CVE-2024-29025 Source advisory: GHSA-5JPM-X58V-624V...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34762 more potentially affected by CVE-2024-29025 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.107.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.1, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.19.0, =0.29.0, =0.0.1, =0.0.14, =0.1.14 - ai.evolv:ascend-sdk 0.5.0 - ai.grakn.kgms:client 1.4.3 and more Source cves: CVE-2024-29025 Source advisory: OSV:GHSA-5JPM-X58V-624V...

io.netty Netty Disclosure

The vulnerability of the io.netty package: The netty-codec-http network programming framework in Netty is related to deficiencies in the system’s controlled zones. Exploiting this vulnerability can allow attackers to disclose protected information...

FreeBSD : cassandra3 -- multiple vulnerabilities (53caf29b-9180-11ed-acbe-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 53caf29b-9180-11ed-acbe-b42e991fc52e advisory. - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI...

HTTP Response Splitting

netty-codec-http is vulnerable to HTTP response splitting attack. The vulnerability exists in the setObject function of DefaultHeaders.java as it takes the arrays and iterators as arguments, providing a way to bypass value validation allowing an attacker to inject malicious header values into the...

ai.djl.serving:serving (0.20.0), berlin.yuna:paginator (>=0.1.38, <=0.1.48) +3558 more potentially affected by CVE-2022-41915 via io.netty:netty-codec-http (>=4.1.83.final, <=4.1.85.final)

io.netty:netty-codec-http MAVEN version =4.1.83.final, =0.1.38, =0.14.0, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0 and more Source cves: CVE-2022-41915 Source advisory: MEND:CVE-2022-41915...

ai.djl.serving:serving (0.20.0), berlin.yuna:paginator (>=0.1.38, <=0.1.48) +3558 more potentially affected by CVE-2022-41915 via io.netty:netty-codec-http (>=4.1.83.final, <=4.1.85.final)

io.netty:netty-codec-http MAVEN version =4.1.83.final, =0.1.38, =0.14.0, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0 and more Source cves: CVE-2022-41915 Source advisory: OSV:GHSA-HH82-3PMQ-7FRP...

ai.djl.serving:serving (0.20.0), berlin.yuna:paginator (>=0.1.38, <=0.1.48) +3558 more potentially affected by CVE-2022-41915 via io.netty:netty-codec-http (>=4.1.83.final, <=4.1.85.final)

io.netty:netty-codec-http MAVEN version =4.1.83.final, =0.1.38, =0.14.0, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0 and more Source cves: CVE-2022-41915 Source advisory: GHSA-HH82-3PMQ-7FRP...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12) +24428 more potentially affected by CVE-2022-24823 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.76.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =1.0.0, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.0.1, =0.0.14, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.2.0 and more Source cves: CVE-2022-24823 Source advisory:...