Search CVE reports


Toggle filters

1 – 10 of 36 results


CVE-2026-33871

Medium priority
Needs evaluation

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of...

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-33870

Medium priority
Needs evaluation

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling...

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-67735

Medium priority
Needs evaluation

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec.http.HttpRequestEncoder` has a CRLF injection with the request URI when...

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-59419

Medium priority
Fixed

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient...

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Fixed Fixed Fixed Fixed
Show less packages

CVE-2025-58057

Medium priority

Some fixes available 6 of 8

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec...

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Fixed Fixed Fixed Fixed
Show less packages

CVE-2025-58056

Low priority

Some fixes available 7 of 10

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly...

2 affected packages

netty-3.9, netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty-3.9 Not in release Not in release Needs evaluation
netty Fixed Fixed Fixed Fixed
Show less packages

CVE-2025-55163

Medium priority
Needs evaluation

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses...

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-25193

Medium priority
Needs evaluation

Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty....

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-24970

Medium priority
Needs evaluation

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't...

1 affected package

netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47535

Medium priority
Needs evaluation

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of...

2 affected packages

netty-3.9, netty

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
netty-3.9 Not in release Not in release Not in release Needs evaluation
netty Ignored Ignored Ignored Ignored
Show less packages