| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-11612 | 5.0 |
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free m
|
26-04-2022 - 17:05 | 07-04-2020 - 18:15 | |
| CVE-2019-16869 | 5.0 |
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
|
30-03-2022 - 14:21 | 26-09-2019 - 16:15 | |
| CVE-2019-20444 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
|
14-09-2021 - 12:45 | 29-01-2020 - 21:15 | |
| CVE-2019-20445 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
|
14-09-2021 - 12:45 | 29-01-2020 - 21:15 | |
| CVE-2019-20444 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
|
25-09-2020 - 20:15 | 29-01-2020 - 21:15 | |
| CVE-2019-20445 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
|
25-09-2020 - 20:15 | 29-01-2020 - 21:15 | |
| CVE-2020-11612 | 7.5 |
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free m
|
25-09-2020 - 20:15 | 07-04-2020 - 18:15 | |
| CVE-2019-16869 | 5.0 |
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
|
25-09-2020 - 00:15 | 26-09-2019 - 16:15 |