TROYANOSYVIRUS
Voltar para CVEs

CVE-2019-20444

CRITICAL
9.1

Descricao

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."

Detalhes CVE

Pontuacao CVSS v3.19.1
SeveridadeCRITICAL
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioNONE
Publicado1/29/2020
Ultima modificacao7/1/2025
Fontenvd
Avistamentos honeypot0

Produtos afetados

canonical:ubuntu_linuxdebian:debian_linuxfedoraproject:fedoranetty:nettyredhat:enterprise_linuxredhat:jboss_amq_clientsredhat:jboss_enterprise_application_platform

Fraquezas (CWE)

CWE-444

Referencias

https://access.redhat.com/errata/RHSA-2020:0497(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0567(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0601(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0605(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0606(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0804(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0805(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0806(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2020:0811(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/netty/netty/issues/9866(af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/4532-1/(af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2021/dsa-4885(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.