NetSight
IP …
high7.5

CVE-2019-16869

Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request sm…

Impact

Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.

Affected products

VendorProductAffected versions
NettyNetty
before 4.1.42
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Version 18.04
RedhatJboss Enterprise Application Platform
Versions 7.2, 7.3, 7.4

Weakness classification

CWE-444

References