CVE-2019-16869
גבוהה 7.5
תיאור (מקור, אנגלית)
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
מדדים
- CVSS 3.1
-
7.5 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - EPSS — סבירות ניצול
- 9% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-444
מוצרים מושפעים
netty: netty; debian: debian linux; canonical: ubuntu linux; redhat: jboss enterprise application platform; redhat: enterprise linux
קישורים
- https://github.com/netty/netty/compare/netty-4.1.41.Final...netty-4.1.42.Final PatchThird Party Advisory
- https://github.com/netty/netty/issues/9571 ExploitIssue TrackingPatchThird Party Advisory
- https://github.com/netty/netty/compare/netty-4.1.41.Final...netty-4.1.42.Final PatchThird Party Advisory
- https://github.com/netty/netty/issues/9571 ExploitIssue TrackingPatchThird Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3892 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3901 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0159 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0160 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0161 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0164 Third Party Advisory