HTTP Response Splitting

🗓️ 13 Dec 2022 02:14:59Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 34 Views

HTTP response splitting vulnerability in netty-codec-http

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Netty (CVE-2022-41915)	29 Mar 202303:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM Process Mining . CVE-2022-41881	5 May 202314:17	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Netty HTTP response splitting (CVE-2022-41915)	14 Feb 202319:18	–	ibm
IBM Security Bulletins	Security Bulletin: Netty is vulnerable to CVE-2022-41915 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202319:55	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to denial of service and response splitting due to vulnerabilities in Netty (CVE-2022-41881 and CVE-2022-41915)	2 Mar 202315:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to HTTP response splitting due to Netty (CVE-2022-41915)	30 Mar 202319:17	–	ibm
IBM Security Bulletins	Security Bulletin: DataPower Operations Dashboard vulnerable to multiple CVEs	12 Apr 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	29 Sep 202318:56	–	ibm

Vulners

Node

netty-codec-http netty-codec-httpRange4.1.0.Beta4–4.1.85.Finaljava

netty-codec-http2 netty-codec-http2Range4.1.0.Beta4–4.1.85.Finaljava

Source	Link
github	www.github.com/netty/netty/commit/fe18adff1c2b333acb135ab779a3b9ba3295a1c4
lists	www.lists.debian.org/debian-lts-announce/2023/01/msg00008.html
debian	www.debian.org/security/2023/dsa-5316
github	www.github.com/advisories/GHSA-hh82-3pmq-7frp
github	www.github.com/netty/netty/issues/13084
github	www.github.com/netty/netty/pull/12760
github	www.github.com/netty/netty/security/advisories/GHSA-hh82-3pmq-7frp
security	www.security.netapp.com/advisory/ntap-20230113-0004/

17 Jul 2023 22:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.00497