| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-11612 | 5.0 |
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free m
|
26-04-2022 - 17:05 | 07-04-2020 - 18:15 | |
| CVE-2019-20444 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
|
14-09-2021 - 12:45 | 29-01-2020 - 21:15 | |
| CVE-2019-20445 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
|
14-09-2021 - 12:45 | 29-01-2020 - 21:15 | |
| CVE-2020-7238 | 5.0 |
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869
|
27-05-2021 - 16:21 | 27-01-2020 - 17:15 | |
| CVE-2019-20444 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
|
25-09-2020 - 20:15 | 29-01-2020 - 21:15 | |
| CVE-2020-7238 | 5.0 |
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869
|
25-09-2020 - 20:15 | 27-01-2020 - 17:15 | |
| CVE-2019-20445 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
|
25-09-2020 - 20:15 | 29-01-2020 - 21:15 | |
| CVE-2020-11612 | 7.5 |
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free m
|
25-09-2020 - 20:15 | 07-04-2020 - 18:15 |