Executive brief
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
Affected products
- Maven io.netty:netty-codec-http
- Maven io.netty:netty
- Maven org.jboss.netty:netty
Junglewise Threat Intelligence
CVE-2021-21290: Local Information Disclosure Vulnerability in Netty on Unix-Like systems
CVE-2021-21290 · Severity: low · CVSS 3.1 · Published 2021-02-08
Technologies: io.netty:netty-codec-http (Maven), io.netty:netty (Maven), org.jboss.netty:netty (Maven). Vendors: Maven.
Related threats
- Netty's HttpPostRequestDecoder can OOM
- Netty vulnerable to HTTP Response splitting from assigning header value iterator
- Local Information Disclosure Vulnerability in io.netty:netty-codec-http
- HTTP request smuggling in netty
- SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way