p PatchFirst

PatchFirst · Latest vulnerabilities

netty vulnerabilities · Page 6

Vulnerabilities published for netty in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 101

  1. CVE-2022-24823

    Medium · CVSS 5.5EPSS 1.04%Fix available

    Local Information Disclosure Vulnerability in io.netty:netty-codec-http

    Netty is an open-source, asynchronous event-driven network application framework. The package `io.netty:netty-codec-http` prior to version 4.1.77.Final contains an insufficient fix for CVE-2021-21290. When Netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. This only impacts applications running on Java version 6 and lower. Additionally, this vulnerability impacts code running on Unix-like systems, and very old versions of Mac OSX and Windows as they all share the system temporary directory between all users. Version 4.1.77.Fin

    nettyOperating systems
    • Update to 1:4.1.48-4+deb11u2ubuntu0.1~esm1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →