Lucene search
IBM59946594D28C648E752D9B3112813E0DAE07898115252275BADA78A6AE51C8E7HistoryFeb 18, 2020 - 4:14 a.m.
Security Bulletin: A vulnerability have been identified in Netty shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library (CVE-2019-16869)
2020-02-1804:14:39
www.ibm.com
17
0.012 Low
EPSS
Percentile
85.6%
Summary
Netty is a dependency component shipped with the IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library for Message Bus Integration. Information about security vulnerabilities affecting Netty has been published. (CVE-2019-16869)
Vulnerability Details
CVEID:CVE-2019-16869
**DESCRIPTION:**Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a “Transfer-Encoding : chunked” line), which leads to HTTP request smuggling.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/167672 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Tivoli Netcool/OMNIbus Integration - Transport Module Common Integration Library | common-transportmodule-12_0 up to and including common-transportmodule-22_0 |
Remediation/Fixes
| Updated Product(s) | Version(s) |
|---|---|
| IBM Tivoli Netcool/OMNIbus Integration - Transport Module Common Integration Library | common-transportmodule-23_0 |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| tivoli netcool/omnibus | eq | 8.1.0 |
Related
nessus
nessus
Debian DSA-4597-1 : netty - security update
2020-01-06 00:00:00
Debian DLA-1941-1 : netty security update
2019-10-01 00:00:00
Debian DLA-2365-1 : netty-3.9 security update
2020-09-08 00:00:00
osv
osv
HTTP Request Smuggling in Netty
2019-10-11 18:41:23
netty - security update
2019-09-30 00:00:00
netty - security update
2020-01-03 00:00:00
cve
cve
CVE-2019-16869
2019-09-26 16:15:11
CVE-2020-7238
2020-01-27 17:15:12
veracode
veracode
HTTP Request Smuggling
2019-09-27 08:45:44
HTTP Request Smuggling
2020-01-31 00:35:33
openvas
openvas
Debian: Security Advisory (DLA-1941-1)
2019-10-01 00:00:00
Debian: Security Advisory (DSA-4597-1)
2020-01-04 00:00:00
Debian: Security Advisory (DLA-2365-1)
2020-09-05 00:00:00
github
github
HTTP Request Smuggling in Netty
2019-10-11 18:41:23
HTTP Request Smuggling in Netty
2020-02-21 18:55:50
ibm
ibm
debian
debian
[SECURITY] [DSA 4597-1] netty security update
2020-01-03 14:58:28
[SECURITY] [DSA 4597-1] netty security update
2020-01-03 14:58:28
[SECURITY] [DLA 1941-1] netty security update
2019-09-30 21:18:13
ubuntucve
ubuntucve
CVE-2019-16869
2019-09-26 00:00:00
CVE-2020-7238
2020-01-27 00:00:00
prion
prion
Design/Logic Flaw
2019-09-26 16:15:00
Design/Logic Flaw
2020-01-27 17:15:00
nvd
nvd
CVE-2019-16869
2019-09-26 16:15:11
CVE-2020-7238
2020-01-27 17:15:12
redhatcve
redhatcve
cvelist
cvelist
CVE-2019-16869
2019-09-26 15:28:25
CVE-2020-7238
2020-01-27 16:43:44
debiancve
debiancve
CVE-2019-16869
2019-09-26 16:15:11
CVE-2020-7238
2020-01-27 17:15:12
f5
f5
K75555129 : Netty vulnerabilities CVE-2019-16869 and CVE-2020-7238
2020-07-13 00:00:00
ubuntu
ubuntu
Netty vulnerabilities
2020-09-22 00:00:00
Netty vulnerabilities
2020-10-22 00:00:00
Netty vulnerabilities
2020-10-27 00:00:00
redhat
redhat
0.012 Low
EPSS
Percentile
85.6%
Related for 59946594D28C648E752D9B3112813E0DAE07898115252275BADA78A6AE51C8E7