VulnerableCode Package Details - pkg:maven/io.netty/netty@3.6.1.Final

Search for packages

Advisory	Summary	Fixed in package version
CVE-2015-2156	Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might …	3.9.9.Final Vulnerable 3.10.4.Final Vulnerable 3.10.5.Final Vulnerable 3.10.6.Final Vulnerable
GHSA-7vpq-g998-qpv7 Aliases: CVE-2014-0193	Netty denial of service vulnerability `WebSocket08FrameDecoder` in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, …	3.6.9.Final Vulnerable
CVE-2021-21409 Aliases: GHSA-f256-j965-7f32 GHSA-wm47-8v5p-wjpj	Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty is an open-source, asynchronous event-driven network application framework for rapid development …	There are no reported fixed by versions.
CVE-2019-20445 Aliases: GHSA-p2v9-g2qv-p635	Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied …	There are no reported fixed by versions.
GHSA-p979-4mfw-53vg Aliases: CVE-2019-16869	HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding …	There are no reported fixed by versions.
GHSA-xfv3-rrfm-f2rv Aliases: CVE-2015-2156	Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework …	3.9.8.Final Vulnerable 3.9.8.Final Vulnerable
CVE-2014-0193 Aliases: GHSA-7vpq-g998-qpv7	Netty denial of service vulnerability WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, …	There are no reported fixed by versions.
CVE-2019-16869 Aliases: GHSA-p979-4mfw-53vg	HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding …	There are no reported fixed by versions.

Advisory

Summary

Fixed in package version

CVE-2015-2156

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might …

3.9.9.Final
Vulnerable

3.10.4.Final
Vulnerable

3.10.5.Final
Vulnerable

3.10.6.Final
Vulnerable

GHSA-7vpq-g998-qpv7
Aliases:
CVE-2014-0193

Netty denial of service vulnerability `WebSocket08FrameDecoder` in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, …

3.6.9.Final
Vulnerable

CVE-2021-21409
Aliases:
GHSA-f256-j965-7f32
GHSA-wm47-8v5p-wjpj

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty is an open-source, asynchronous event-driven network application framework for rapid development …