Executive brief
HTTP Request Smuggling in Netty
Affected products
- Maven io.netty:netty-handler
- Maven io.netty:netty
- Maven org.jboss.netty:netty
Junglewise Threat Intelligence
CVE-2019-20445: HTTP Request Smuggling in Netty
CVE-2019-20445 · Severity: info · Published 2020-02-21
Technologies: io.netty:netty-handler (Maven), io.netty:netty (Maven), org.jboss.netty:netty (Maven). Vendors: Maven.
Related threats
- SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
- Withdrawn Advisory: Netty-handler does not validate host names by default
- netty-handler SniHandler 16MB allocation
- HTTP request smuggling in netty
- SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way