Vulnetix
Try Vulnetix Request Demo
CVE-2020-7238 PUBLISHED

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

EPSS 1.50% · 81.0th percentile

Risk Scores

EPSS Score
1.50%
81.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSnetty1:4.0.34-1, 1:4.0.34-1ubuntu0.1~esm1, 1:4.0.34-1ubuntu0.1~esm3
Ubuntu:Pro:14.04:LTSnetty0, 1:3.2.6.Final-2
Ubuntu:16.04:LTSnetty-3.93.9.0.Final-1, 0
Ubuntu:Pro:18.04:LTSnetty0, 1:4.1.7-4, 1:4.1.7-4ubuntu0.1~esm1

Timeline

References

Open in Interactive Console →