Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-4885-1:31BC0
HistoryApr 05, 2021 - 7:06 p.m.

[SECURITY] [DSA 4885-1] netty security update

2021-04-0519:06:20
lists.debian.org
58
netty
cve
security update
http request smuggling
denial of service
information disclosure

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8

Confidence

High

EPSS

0.186

Percentile

96.3%

JSON

Debian Security Advisory DSA-4885-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
April 05, 2021 https://www.debian.org/security/faq

Package : netty
CVE ID : CVE-2019-20444 CVE-2019-20445 CVE-2020-7238 CVE-2020-11612
CVE-2021-21290 CVE-2021-21295 CVE-2021-21409

Multiple security issues were discovered in Netty, a Java NIO
client/server framework, which could result in HTTP request smuggling,
denial of service or information disclosure.

For the stable distribution (buster), these problems have been fixed in
version 1:4.1.33-1+deb10u2.

We recommend that you upgrade your netty packages.

For the detailed security status of netty please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/netty

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian10allnetty< 1:4.1.33-1+deb10u2netty_1:4.1.33-1+deb10u2_all.deb
Debian9allnetty< 1:4.1.7-2+deb9u2netty_1:4.1.7-2+deb9u2_all.deb
Debian9allnetty-3.9< 3.9.9.Final-1+deb9u1netty-3.9_3.9.9.Final-1+deb9u1_all.deb
Debian8allnetty-3.9< 3.9.0.Final-1+deb8u1netty-3.9_3.9.0.Final-1+deb8u1_all.deb
Debian8allnetty< 1:3.2.6.Final-2+deb8u2netty_1:3.2.6.Final-2+deb8u2_all.deb
Debian9allnetty< 1:4.1.7-2+deb9u3netty_1:4.1.7-2+deb9u3_all.deb
Debian10alllibnetty-java< 1:4.1.33-1+deb10u2libnetty-java_1:4.1.33-1+deb10u2_all.deb
Debian9alllibnetty-java< 1:4.1.7-2+deb9u3libnetty-java_1:4.1.7-2+deb9u3_all.deb
Debian9alllibnetty-3.9-java< 3.9.9.Final-1+deb9u1libnetty-3.9-java_3.9.9.Final-1+deb9u1_all.deb
Debian9alllibnetty-java< 1:4.1.7-2+deb9u2libnetty-java_1:4.1.7-2+deb9u2_all.deb
Rows per page:
1-10 of 121

Related

osv 26
openvas 16
nessus 26
fedora 2
redhat 23
ubuntu 4
debian 5
ibm 41
prion 6
debiancve 5
cvelist 6
nvd 6
cve 6
mageia 1
ubuntucve 6
redos 1
veracode 6
f5 2
github 5
redhatcve 4
suse 2
osv
osv
netty - security update
2021-04-05 00:00:00
netty - security update
2020-09-04 00:00:00
netty - security update
2020-02-19 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4885-1)
2021-04-07 00:00:00
Fedora: Security Advisory for jctools (FEDORA-2020-66b5f85ccc)
2020-09-26 00:00:00
Fedora: Security Advisory for netty (FEDORA-2020-66b5f85ccc)
2020-09-26 00:00:00
nessus
nessus
Debian DSA-4885-1 : netty - security update
2021-04-06 00:00:00
RHEL 6 / 7 / 8 : Red Hat JBoss Enterprise Application Platform 7.2 (RHSA-2020:0605)
2020-02-27 00:00:00
Debian DLA-2109-1 : netty security update
2020-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: netty-4.1.51-1.fc33
2020-09-25 17:16:37
[SECURITY] Fedora 33 Update: jctools-3.1.0-1.fc33
2020-09-25 17:16:36
redhat
redhat
(RHSA-2020:0567) Important: Red Hat build of Eclipse Vert.x 3.8.5 security update
2020-03-03 16:07:01
(RHSA-2020:0601) Important: AMQ Clients 2.6.0 Release
2020-02-25 15:01:50
(RHSA-2020:0606) Important: Red Hat JBoss Enterprise Application Platform 7.2 security update
2020-02-25 17:21:05
ubuntu
ubuntu
Netty vulnerabilities
2020-10-27 00:00:00
Netty vulnerabilities
2020-10-22 00:00:00
Netty vulnerabilities
2023-04-28 00:00:00
debian
debian
[SECURITY] [DLA 2109-1] netty security update
2020-02-19 18:04:02
[SECURITY] [DLA 2364-1] netty security update
2020-09-04 18:39:54
[SECURITY] [DLA 2365-1] netty-3.9 security update
2020-09-04 18:41:04
ibm
ibm
Security Bulletin: Netty Vulnerabilities Affect the B2B API of IBM Sterling B2B Integrator
2021-10-05 21:05:46
Security Bulletin: Multiple vulnerabilities have been identified in Netty shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library (CVE-2021-21290, CVE-2021-21295, CVE-2021-21409)
2021-06-17 08:12:46
Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis
2024-09-06 08:22:03
prion
prion
Design/Logic Flaw
2021-03-30 15:15:00
Design/Logic Flaw
2020-01-29 21:15:00
Design/Logic Flaw
2020-04-07 18:15:00
debiancve
debiancve
CVE-2021-21409
2021-03-30 15:15:14
CVE-2019-20444
2020-01-29 21:15:11
CVE-2019-20445
2020-01-29 21:15:11
cvelist
cvelist
CVE-2021-21409 Possible request smuggling in HTTP/2 due missing validation of content-length
2021-03-30 15:05:17
CVE-2019-20445
2020-01-29 20:33:03
CVE-2019-20444
2020-01-29 20:33:17
nvd
nvd
CVE-2021-21409
2021-03-30 15:15:14
CVE-2019-20444
2020-01-29 21:15:11
CVE-2021-21295
2021-03-09 19:15:12
cve
cve
CVE-2021-21409
2021-03-30 15:15:14
CVE-2020-11612
2020-04-07 18:15:13
CVE-2019-20444
2020-01-29 21:15:11
mageia
mageia
Updated netty packages fix security vulnerabilities
2021-07-27 23:21:53
ubuntucve
ubuntucve
CVE-2021-21409
2021-03-30 00:00:00
CVE-2019-20444
2020-01-29 00:00:00
CVE-2019-20445
2020-01-29 00:00:00
redos
redos
ROS-20220125-11
2022-01-25 00:00:00
veracode
veracode
HTTP Request Smuggling
2021-03-31 04:38:02
HTTP Request Smuggling
2020-01-31 06:26:41
Denial Of Service (DoS)
2020-04-08 03:25:55
f5
f5
K14752415 : Netty vulnerability CVE-2019-20444
2020-07-13 00:00:00
K55834441 : Netty vulnerability CVE-2021-21295
2021-10-01 00:00:00
github
github
Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
2020-10-16 17:03:43
HTTP Request Smuggling in Netty
2020-02-21 18:55:24
Denial of Service in Netty
2020-06-15 19:36:16
redhatcve
redhatcve
CVE-2020-11612
2022-05-14 11:43:51
CVE-2021-21295
2021-08-22 13:44:33
CVE-2021-21409
2021-03-30 22:08:39
suse
suse
Security update for netty (moderate)
2021-03-19 00:00:00
Security update for netty (important)
2022-04-20 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8

Confidence

High

EPSS

0.186

Percentile

96.3%

JSON
Related for DEBIAN:DSA-4885-1:31BC0
osv26openvas16nessus26fedora2redhat23ubuntu4debian5ibm41prion6debiancve5cvelist6nvd6cve6mageia1ubuntucve6redos1veracode6f52github5redhatcve4suse2