WaratekVRT Sign in

Netty CVEs

114 CVEs, 1 exploited, 8 protected by Waratek

Reset
More filters (1)
Columns
Product netty✕
Overview 114 matches · 8 protected · 1 exploited · 1 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5
114matches 8protected7.0% 1exploited0.9% 1CISA KEV0.9% 1public PoC0.9% 1EPSS ≥ 0.50.9%
Protected by Waratek 8 7.0% Rule in development 0 0.0% Mitigation candidate 1 0.9% No exploit published 105 92.1%
Critical 12 10.5% High 58 50.9% Medium 42 36.8% Low 2 1.8% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 8 7.0% partly blocked 0 0.0% not blocked 106 93.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 0.9% Working exploit published 0 0.0% Proof of concept only 32 28.1% Forecast only 0 0.0% No public exploit 81 71.1%
split by peak 73 / year
No exploit published: 105Mitigation candidate: 1Protected by Waratek: 8 Low: 2Medium: 42High: 58Critical: 12 not blocked: 106blocked by ARMR today: 8 No public exploit: 81Proof of concept only: 32Exploited: 1
20141 No exploit published1 Medium1 not blocked1 No public exploit1 20150 20160 20172 No exploit published2 High2 not blocked2 No public exploit2 20180 20192 No exploit published2 High2 not blocked2 No public exploit2 20208 Protected by Waratek1 No exploit published7 Critical4 High2 Medium2 blocked by ARMR today1 not blocked7 No public exploit8 20215 Protected by Waratek3 No exploit published2 High2 Medium3 blocked by ARMR today3 not blocked2 No public exploit5 20224 No exploit published4 High1 Medium3 not blocked4 Proof of concept only3 No public exploit1 20235 Mitigation candidate1 No exploit published4 High4 Medium1 not blocked5 Exploited1 No public exploit4 20246 No exploit published6 Critical1 High2 Medium3 not blocked6 Proof of concept only2 No public exploit4 20258 Protected by Waratek1 No exploit published7 High1 Medium6 Low1 blocked by ARMR today1 not blocked7 Proof of concept only5 No public exploit3 202673 Protected by Waratek3 No exploit published70 Critical7 High42 Medium23 Low1 blocked by ARMR today3 not blocked70 Proof of concept only22 No public exploit51
2014201620182020202220242026
114 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2021-21290 Medium 2021-02-08 Protected by Waratek No public exploit Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method "File.createTempFile" on unix-like systems creates a random file, but, by default will create this file with the permissions "-rw-r--r--". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's "AbstractDiskHttpData" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own "java.io.tmpdir" when you start the JVM or use "DefaultHttpDataFactory.setBaseDir(...)" to set the directory to something that is only readable by the current user.
CVE-2020-11973 Critical 2020-05-14 Protected by Waratek No public exploit Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
CVE-2020-7622 Critical 2020-04-06 No exploit published No public exploit This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set to false which means it does not validates that the header isn't being abused for HTTP Response Splitting.
CVE-2020-5404 Medium 2020-03-03 No exploit published No public exploit The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must have been explicitly configured to follow redirects.
CVE-2020-5403 High 2020-03-03 No exploit published No public exploit Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response.
CVE-2019-10797 Medium 2020-02-19 No exploit published No public exploit Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.
CVE-2019-20445 Critical 2020-01-29 No exploit published No public exploit HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
CVE-2019-20444 Critical 2020-01-29 No exploit published No public exploit HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
CVE-2020-7238 High 2020-01-27 No exploit published No public exploit Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.
CVE-2019-11284 High 2019-10-17 No exploit published No public exploit Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
CVE-2019-16869 High 2019-09-26 No exploit published No public exploit Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
CVE-2015-2156 High 2017-10-18 No exploit published No public exploit Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.
CVE-2016-4970 High 2017-04-13 No exploit published No public exploit handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
CVE-2014-0193 Medium 2014-05-06 No exploit published No public exploit WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.
‹ prev page 2 of 2 next ›