Kritik CVSS 9.1 PoC var
CVE-2019-20444: Netty: güvenlik açığı
Açıklama (NVD)
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
Özet bilgiler
- Ürün
- Netty Netty
- CVSS v3.1
- 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - EPSS
- %8,91 (yüzdelik 95)
- CWE
- CWE-444
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| netty-netty | — | — | 4.1.44 |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |
| fedoraproject-fedora | 33 | 33 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| redhat-jboss-amq-clients | 2 | 2 | — |
| redhat-jboss-enterprise-application-platform | 7.2 | 7.2 | — |
| redhat-jboss-enterprise-application-platform | 7.3 | 7.3 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- github.com
- github.com
- github.com
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- CWE-444