tocsin

CVE-2021-21409

3 advisories.

Maven/io.netty:netty-codec-http2 CVE-2021-21409: medium 5.9, EPSS 4.93%

Possible request smuggling in HTTP/2 due missing validation of content-length

Action: Upgrade io.netty:netty-codec-http2 to 4.1.61.Final or later.

Affected

introducedfixedlast affected
4.0.04.1.61.Final-

Fixed versions

4.1.61.Final

Sources

CVE-2021-21409 · published · modified · JSON

Maven/org.jboss.netty:netty CVE-2021-21409: medium 5.9, EPSS 4.93%

Possible request smuggling in HTTP/2 due missing validation of content-length

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2021-21409 · published · modified · JSON

Maven/io.netty:netty CVE-2021-21409: medium 5.9, EPSS 4.93%

Possible request smuggling in HTTP/2 due missing validation of content-length

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2021-21409 · published · modified · JSON