NetSight
IP …
high7.5

CVE-2020-7238

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a lat…

Impact

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

Affected products

VendorProductAffected versions
NettyNetty
Version 4.1.43
FedoraprojectFedora
Version 33
DebianDebian Linux
Versions 8.0, 9.0, 10.0
RedhatJboss Enterprise Application Platform
Versions 7.2, 7.3, 7.4
RedhatJboss Enterprise Application Platform Text-Only Advisories
All versions
RedhatOpenshift Application Runtimes Text-Only Advisories
All versions

Weakness classification

CWE-444

References