DeutschShown in its original language — a full translation is planned for a future version.
Netty: Mehrere Schwachstellen
view advisory published 2026-09-20
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.
01
describes (23)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-93574US | medium6.5 | — | ||
A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes… | ||||
| CVE-2026-93562US | medium6.5 | — | ||
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending spec… | ||||
| CVE-2026-93579US | medium6.5 | — | ||
A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 head… | ||||
| CVE-2026-93576US | high7.5 | — | ||
A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote att… | ||||
| CVE-2026-93573US | medium6.5 | — | ||
A flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass `Transfer-Encoding` header validation by splitting the `Transfer-Encoding` field… | ||||
| CVE-2026-93569US | high8.2 | — | ||
A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request includes both an abs… | ||||
| CVE-2026-93568US | high7.5 | — | ||
A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's HTTP-object conversio… | ||||
| CVE-2026-93567US | high7.5 | — | ||
A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form re… | ||||
| CVE-2026-93566US | medium6.5 | — | ||
A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control characters within the chunk-size line. This bypass… | ||||
| CVE-2026-93565US | high7.5 | — | ||
A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol (RTSP) requ… | ||||
| CVE-2026-93564US | high7.5 | — | ||
A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 head… | ||||
| CVE-2026-93558US | high7.5 | — | ||
A flaw was found in Netty's WebSocketServerExtensionHandler. A remote, unauthenticated attacker can exploit this vulnerability by using HTTP/1.1 pipelining to send requests faster… | ||||
| CVE-2026-93560US | high7.5 | — | ||
A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integ… | ||||
| CVE-2026-93492US | medium5.3 | — | ||
A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAX_HEADER_TABLE_SIZE. This causes the Hpack… | ||||
| CVE-2026-93491US | high7.5 | — | ||
A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholdin… | ||||
| CVE-2026-93488US | high7.5 | — | ||
A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAX_VALUE and th… | ||||
| CVE-2026-93578US | — | — | ||
A flaw was found in Netty's Online Certificate Status Protocol (OCSP) Client. The client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage (EKU) in OCSP responder certific… | ||||
| CVE-2026-93575US | high7.5 | — | ||
A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to… | ||||
| CVE-2026-93572US | high7.5 | — | ||
A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis (RESP) array headers. This… | ||||
| CVE-2026-93563US | high7.5 | — | ||
A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a speci… | ||||
showing 20 of 23
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:69440 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:69470 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:70257 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:83612 vom 2026-10-15external
- Red Hat Bugtracker 2536887 vom 2026-09-20external
- Red Hat Bugtracker 2536891 vom 2026-09-20external
- Red Hat Bugtracker 2536895 vom 2026-09-20external
- Red Hat Bugtracker 2536932 vom 2026-09-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan