Red Hat OpenShift Application Runtimes/netty

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
netty-handler SniHandler 16MB allocationCVE-2023-34462 · GHSA-6MJQ-H674-J845	io.netty:netty-handler A-MQ Clients 2/netty	MavenRed Hat	Medium	Fix reported	2026-09-10
Local Information Disclosure Vulnerability in Netty on Unix-Like systemsCVE-2021-21290 · GHSA-5MCR-GQ6C-3HQ2	io.netty:netty-codec-http io.netty:netty	MavenRed Hat	Medium	Fix reported	2026-09-10
Possible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409 · GHSA-F256-J965-7F32	io.netty:netty-codec-http2 io.netty:netty	MavenRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/net/http vulnerable to a reset floodCVE-2019-9514 · GHSA-39QC-96H7-956F	golang.org/x/net Red Hat AMQ Broker 7/jetty	GoRed Hat	High	Fix reported	2024-05-21
golang.org/x/net/http vulnerable to ping floodsCVE-2019-9512 · GHSA-HGR8-6H9X-F7Q9	golang.org/x/net Red Hat AMQ Broker 7/jetty	GoRed Hat	High	Fix reported	2024-05-21
Denial of Service in NettyCVE-2020-11612 · GHSA-MM9X-G8PC-W292	io.netty:netty-handler Red Hat Fuse 7/karaf-transaction-manager-narayana	MavenRed Hat	High	Fix reported	2024-03-14
Possible request smuggling in HTTP/2 due missing validationCVE-2021-21295 · GHSA-WM47-8V5P-WJPJ	io.netty:netty-codec-http2 io.netty:netty	MavenRed Hat	Medium	Fix reported	2023-08-16
HTTP/2: flood using empty frames results in excessive resource consumptionCVE-2019-9518	Red Hat AMQ Broker 7/jetty Red Hat AMQ Broker 7/netty	Red Hat	High	No fix reported	Not recorded
HTTP/2: flood using SETTINGS frames results in unbounded memory growthCVE-2019-9515	Red Hat AMQ Broker 7/jetty Red Hat AMQ Broker 7/netty	Red Hat	High	No fix reported	Not recorded