Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SU-2022:1271-1
HistoryApr 20, 2022 - 12:00 a.m.

Security update for netty (important)

2022-04-2000:00:00
lists.opensuse.org
51

0.186 Low

EPSS

Percentile

96.3%

JSON

An update that fixes 5 vulnerabilities is now available.

Description:

This update for netty fixes the following issues:

  • Updated to version 4.1.75:
    • CVE-2021-37136: Fixed an unrestricted decompressed data size in
      Bzip2Decoder (bsc#1190610).
    • CVE-2021-37137: Fixed an unrestricted chunk length in
      SnappyFrameDecoder, which might lead to excessive memory usage
      (#bsc#1190613).
    • CVE-2021-43797: Fixed a potential HTTP request smuggling issue due to
      insufficient validation against control characters (bsc#1193672).
    • CVE-2021-21290: Fixed an information disclosure via the local system
      temporary directory (bsc#1182103).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-1271=1

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-1271=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4aarch64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.4ppc64le< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.4s390x< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.4x86_64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.4noarch< - openSUSE Leap 15.4 (noarch):- openSUSE Leap 15.4 (noarch):.noarch.rpm
openSUSE Leap15.3aarch64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.3ppc64le< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.3s390x< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.3noarch< - openSUSE Leap 15.3 (noarch):- openSUSE Leap 15.3 (noarch):.noarch.rpm

Related

openvas 11
nessus 24
ibm 34
redhat 36
ubuntu 1
osv 21
debian 4
veracode 7
nvd 7
ubuntucve 7
suse 2
prion 7
cvelist 7
redhatcve 6
github 6
f5 1
debiancve 7
cve 7
mageia 2
redos 1
rocky 1
openvas
openvas
openSUSE: Security Advisory for netty (SUSE-SU-2022:1271-1)
2022-04-21 00:00:00
Ubuntu: Security Advisory (USN-6049-1)
2023-05-01 00:00:00
Debian: Security Advisory (DLA-3268-1)
2023-01-12 00:00:00
nessus
nessus
openSUSE 15 Security Update : netty (SUSE-SU-2022:1271-1)
2023-01-20 00:00:00
Oracle NoSQL Database Multiple Vulnerabilities (Oct 2021 CPU)
2021-10-20 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 LTS : Netty vulnerabilities (USN-6049-1)
2023-04-28 00:00:00
ibm
ibm
Security Bulletin: IBM Sterling Order Management Netty 4.1.34 vulnerablity
2024-01-05 14:45:21
Security Bulletin: IBM Security Guardium is affected by a number of security vulnerabilities in Netty, which is used by Guardium (CVE-2021-21290, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2021-37137)
2022-05-27 17:58:00
Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to several attack vectors due to its use of Apache Netty (CVE-2021-37136, CVE-2021-37137, CVE-2021-43797)
2022-06-29 14:09:50
redhat
redhat
(RHSA-2021:3959) Moderate: Red Hat build of Eclipse Vert.x 4.1.5 security update
2021-11-10 16:37:03
(RHSA-2021:0943) Moderate: Red Hat build of Eclipse Vert.x 4.0.3 security update
2021-03-31 09:34:13
(RHSA-2021:4851) Low: Red Hat AMQ Broker 7.9.1 release and security update
2021-11-30 08:40:21
ubuntu
ubuntu
Netty vulnerabilities
2023-04-28 00:00:00
osv
osv
netty vulnerabilities
2023-04-28 16:02:26
netty - security update
2023-01-11 00:00:00
netty - security update
2023-01-11 00:00:00
debian
debian
[SECURITY] [DLA 3268-1] netty security update
2023-01-11 22:57:14
[SECURITY] [DSA 5316-1] netty security update
2023-01-11 22:38:12
[SECURITY] [DLA 2555-1] netty security update
2021-02-11 13:02:37
veracode
veracode
Denial Of Service(DoS)
2021-09-10 06:32:27
Denial Of Service(DoS)
2021-09-10 06:15:09
HTTP Request Smuggling
2021-12-10 07:49:39
nvd
nvd
CVE-2021-37137
2021-10-19 15:15:07
CVE-2021-37136
2021-10-19 15:15:07
CVE-2021-43797
2021-12-09 19:15:07
ubuntucve
ubuntucve
CVE-2021-21295
2021-03-09 00:00:00
CVE-2021-37137
2021-10-19 00:00:00
CVE-2021-37136
2021-10-19 00:00:00
suse
suse
Security update for netty (moderate)
2021-03-19 00:00:00
Security update for netty3 (moderate)
2022-06-13 00:00:00
prion
prion
Design/Logic Flaw
2021-03-09 19:15:00
Design/Logic Flaw
2021-10-19 15:15:00
Design/Logic Flaw
2021-02-08 20:15:00
cvelist
cvelist
CVE-2021-21295 Possible request smuggling in HTTP/2 due missing validation
2021-03-09 18:35:19
CVE-2021-37137
2021-10-19 00:00:00
CVE-2021-37136
2021-10-19 00:00:00
redhatcve
redhatcve
CVE-2021-43797
2021-12-13 20:02:24
CVE-2021-37137
2021-09-14 15:09:07
CVE-2021-37136
2021-09-14 15:09:07
github
github
HTTP request smuggling in netty
2021-12-09 19:09:17
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
2021-09-09 17:11:31
Bzip2Decoder doesn't allow setting size restrictions for decompressed data
2021-09-09 17:11:21
f5
f5
K55834441 : Netty vulnerability CVE-2021-21295
2021-10-01 00:00:00
debiancve
debiancve
CVE-2021-21295
2021-03-09 19:15:12
CVE-2021-37136
2021-10-19 15:15:07
CVE-2021-43797
2021-12-09 19:15:07
cve
cve
CVE-2021-37137
2021-10-19 15:15:07
CVE-2021-37136
2021-10-19 15:15:07
CVE-2021-43797
2021-12-09 19:15:07
mageia
mageia
Updated netty packages fix a security vulnerability
2021-03-15 00:20:42
Updated netty packages fix security vulnerabilities
2021-07-27 23:21:53
redos
redos
ROS-20220125-11
2022-01-25 00:00:00
rocky
rocky
Satellite 6.12 Release
2022-11-16 13:21:30

0.186 Low

EPSS

Percentile

96.3%

JSON
Related for SUSE-SU-2022:1271-1
openvas11nessus24ibm34redhat36ubuntu1osv21debian4veracode7nvd7ubuntucve7suse2prion7cvelist7redhatcve6github6f51debiancve7cve7mageia2redos1rocky1