VDB
SUSE-SU-2022%3A1315-1
SUSE-SU-2022%3A1315-1
PUBLISHED
CVSS 6.5 MEDIUM
This update for netty fixes the following issues: - CVE-2021-21409: Fixed request smuggling via content-length header (bsc#1184203).
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| netty | ||
| openSUSE Leap 15.3 |
Timeline
- Apr 22, 2022 CVE Published
- Sep 20, 2026 CVE Updated
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_1315-1.json advisory
- https://www.suse.com/support/update/announcement/2022/suse-su-20221315-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-April/010800.html advisory
- https://bugzilla.suse.com/1184203 advisory
- https://www.suse.com/security/cve/CVE-2021-21409/ advisory