Lucene search
Veracode Vulnerability DatabaseVERACODE:33238HistoryDec 10, 2021 - 7:49 a.m.
HTTP Request Smuggling
2021-12-1007:49:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
32
0.002 Low
EPSS
Percentile
62.3%
io.netty:netty-codec-http is vulnerable to HTTP request smuggling. Improper validation of control chars, when they are present at the beginning and/or end of the header name leads to HTTP request smuggling which allows an attacker to exploit other remote systems when these headers are used as a proxy.
Related
ubuntucve
ubuntucve
CVE-2021-43797
2021-12-09 00:00:00
debiancve
debiancve
CVE-2021-43797
2021-12-09 19:15:07
osv
osv
CVE-2021-43797
2021-12-09 19:15:07
HTTP request smuggling in netty
2021-12-09 19:09:17
netty - security update
2023-01-11 00:00:00
ibm
ibm
cve
cve
CVE-2021-43797
2021-12-09 19:15:07
nessus
nessus
SUSE SLED15 / SLES15 Security Update : netty3 (SUSE-SU-2022:2047-1)
2022-06-14 00:00:00
Oracle Coherence (Apr 2022 CPU)
2022-04-20 00:00:00
openSUSE 15 Security Update : netty (SUSE-SU-2022:1271-1)
2023-01-20 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2047-1)
2022-06-14 00:00:00
openSUSE: Security Advisory for netty3 (SUSE-SU-2022:2047-1)
2022-06-14 00:00:00
openSUSE: Security Advisory for netty (SUSE-SU-2022:1271-1)
2022-04-21 00:00:00
redhatcve
redhatcve
CVE-2021-43797
2021-12-13 20:02:24
github
github
HTTP request smuggling in netty
2021-12-09 19:09:17
prion
prion
Design/Logic Flaw
2021-12-09 19:15:00
cvelist
cvelist
nvd
nvd
CVE-2021-43797
2021-12-09 19:15:07
suse
suse
Security update for netty3 (moderate)
2022-06-13 00:00:00
Security update for netty (important)
2022-04-20 00:00:00
redhat
redhat
debian
debian
[SECURITY] [DSA 5316-1] netty security update
2023-01-11 22:38:12
[SECURITY] [DLA 3268-1] netty security update
2023-01-11 22:57:14
ubuntu
ubuntu
Netty vulnerabilities
2023-04-28 00:00:00
rocky
rocky
Satellite 6.11 Release
2022-07-05 13:55:16
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00