CVE-2021-21409
First published: Tue Mar 30 2021(Updated: )
### Impact The content-length header is not correctly validated if the request only use a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1 This is a followup of https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj which did miss to fix this one case. ### Patches This was fixed as part of 4.1.61.Final ### Workarounds Validation can be done by the user before proxy the request by validating the header.
Credit: security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/io.netty:netty | <4.0.0 | |
| maven/org.jboss.netty:netty | <4.0.0 | |
| maven/io.netty:netty-codec-http2 | >=4.0.0<4.1.61.Final | 4.1.61.Final |
| redhat/qpid-proton | <0:0.33.0-6.el7_9 | 0:0.33.0-6.el7_9 |
| redhat/qpid-proton | <0:0.33.0-8.el8 | 0:0.33.0-8.el8 |
| redhat/eap7-elytron-web | <0:1.6.3-1.Final_redhat_00001.1.el6ea | 0:1.6.3-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-hal-console | <0:3.2.15-1.Final_redhat_00001.1.el6ea | 0:3.2.15-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-hibernate | <0:5.3.20-3.SP1_redhat_00001.1.el6ea | 0:5.3.20-3.SP1_redhat_00001.1.el6ea |
| redhat/eap7-infinispan | <0:9.4.23-1.Final_redhat_00001.1.el6ea | 0:9.4.23-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-ironjacamar | <0:1.4.33-1.Final_redhat_00001.1.el6ea | 0:1.4.33-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jberet | <0:1.3.8-1.Final_redhat_00001.1.el6ea | 0:1.3.8-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-remoting | <0:5.0.23-1.Final_redhat_00001.1.el6ea | 0:5.0.23-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-server-migration | <0:1.7.2-7.Final_redhat_00008.1.el6ea | 0:1.7.2-7.Final_redhat_00008.1.el6ea |
| redhat/eap7-netty | <0:4.1.63-1.Final_redhat_00001.1.el6ea | 0:4.1.63-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-undertow | <0:2.0.38-1.SP1_redhat_00001.1.el6ea | 0:2.0.38-1.SP1_redhat_00001.1.el6ea |
| redhat/eap7-wildfly | <0:7.3.8-1.GA_redhat_00001.1.el6ea | 0:7.3.8-1.GA_redhat_00001.1.el6ea |
| redhat/eap7-wildfly-elytron | <0:1.10.13-1.Final_redhat_00001.1.el6ea | 0:1.10.13-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-wildfly-http-client | <0:1.0.28-1.Final_redhat_00001.1.el6ea | 0:1.0.28-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-elytron-web | <0:1.6.3-1.Final_redhat_00001.1.el7ea | 0:1.6.3-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-hal-console | <0:3.2.15-1.Final_redhat_00001.1.el7ea | 0:3.2.15-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-hibernate | <0:5.3.20-3.SP1_redhat_00001.1.el7ea | 0:5.3.20-3.SP1_redhat_00001.1.el7ea |
| redhat/eap7-infinispan | <0:9.4.23-1.Final_redhat_00001.1.el7ea | 0:9.4.23-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-ironjacamar | <0:1.4.33-1.Final_redhat_00001.1.el7ea | 0:1.4.33-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jberet | <0:1.3.8-1.Final_redhat_00001.1.el7ea | 0:1.3.8-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-remoting | <0:5.0.23-1.Final_redhat_00001.1.el7ea | 0:5.0.23-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-server-migration | <0:1.7.2-7.Final_redhat_00008.1.el7ea | 0:1.7.2-7.Final_redhat_00008.1.el7ea |
| redhat/eap7-netty | <0:4.1.63-1.Final_redhat_00001.1.el7ea | 0:4.1.63-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-undertow | <0:2.0.38-1.SP1_redhat_00001.1.el7ea | 0:2.0.38-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-wildfly | <0:7.3.8-1.GA_redhat_00001.1.el7ea | 0:7.3.8-1.GA_redhat_00001.1.el7ea |
| redhat/eap7-wildfly-elytron | <0:1.10.13-1.Final_redhat_00001.1.el7ea | 0:1.10.13-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-wildfly-http-client | <0:1.0.28-1.Final_redhat_00001.1.el7ea | 0:1.0.28-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-elytron-web | <0:1.6.3-1.Final_redhat_00001.1.el8ea | 0:1.6.3-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-hal-console | <0:3.2.15-1.Final_redhat_00001.1.el8ea | 0:3.2.15-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-hibernate | <0:5.3.20-3.SP1_redhat_00001.1.el8ea | 0:5.3.20-3.SP1_redhat_00001.1.el8ea |
| redhat/eap7-infinispan | <0:9.4.23-1.Final_redhat_00001.1.el8ea | 0:9.4.23-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-ironjacamar | <0:1.4.33-1.Final_redhat_00001.1.el8ea | 0:1.4.33-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jberet | <0:1.3.8-1.Final_redhat_00001.1.el8ea | 0:1.3.8-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-remoting | <0:5.0.23-1.Final_redhat_00001.1.el8ea | 0:5.0.23-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-server-migration | <0:1.7.2-7.Final_redhat_00008.1.el8ea | 0:1.7.2-7.Final_redhat_00008.1.el8ea |
| redhat/eap7-netty | <0:4.1.63-1.Final_redhat_00001.1.el8ea | 0:4.1.63-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-undertow | <0:2.0.38-1.SP1_redhat_00001.1.el8ea | 0:2.0.38-1.SP1_redhat_00001.1.el8ea |
| redhat/eap7-wildfly | <0:7.3.8-1.GA_redhat_00001.1.el8ea | 0:7.3.8-1.GA_redhat_00001.1.el8ea |
| redhat/eap7-wildfly-elytron | <0:1.10.13-1.Final_redhat_00001.1.el8ea | 0:1.10.13-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-wildfly-http-client | <0:1.0.28-1.Final_redhat_00001.1.el8ea | 0:1.0.28-1.Final_redhat_00001.1.el8ea |
| redhat/candlepin | <0:4.1.13-1.el7 | 0:4.1.13-1.el7 |
| redhat/candlepin | <0:4.1.13-1.el8 | 0:4.1.13-1.el8 |
| redhat/netty-codec-http | <4.1.61. | 4.1.61. |
| debian/netty | 1:4.1.33-1+deb10u2 1:4.1.33-1+deb10u4 1:4.1.48-4+deb11u2 1:4.1.48-7+deb12u1 1:4.1.48-9 | |
| ubuntu/netty | <1:4.1.7-4ubuntu0.1+ | 1:4.1.7-4ubuntu0.1+ |
| ubuntu/netty | <1:4.1.45-1ubuntu0.1~ | 1:4.1.45-1ubuntu0.1~ |
| ubuntu/netty | <1:4.1.48-4+ | 1:4.1.48-4+ |
| ubuntu/netty | <1:4.1.48-5ubuntu0.1 | 1:4.1.48-5ubuntu0.1 |
| ubuntu/netty | <1:4.0.34-1ubuntu0.1~ | 1:4.0.34-1ubuntu0.1~ |
| Netty Netty | <4.1.61 | |
| Debian Debian Linux | =10.0 | |
| NetApp OnCommand API Services | ||
| NetApp OnCommand Workflow Automation | ||
| Oracle Banking Corporate Lending Process Management | =14.2.0 | |
| Oracle Banking Corporate Lending Process Management | =14.3.0 | |
| Oracle Banking Corporate Lending Process Management | =14.5.0 | |
| Oracle Banking Credit Facilities Process Management | =14.2.0 | |
| Oracle Banking Credit Facilities Process Management | =14.3.0 | |
| Oracle Banking Credit Facilities Process Management | =14.5.0 | |
| Oracle Banking Trade Finance Process Management | =14.2.0 | |
| Oracle Banking Trade Finance Process Management | =14.3.0 | |
| Oracle Banking Trade Finance Process Management | =14.5.0 | |
| Oracle Coherence | =12.2.1.4.0 | |
| Oracle Coherence | =14.1.1.0.0 | |
| Oracle Communications Brm - Elastic Charging Engine | =12.0.0.3 | |
| Oracle Communications Cloud Native Core Console | =1.7.0 | |
| Oracle Communications Cloud Native Core Policy | =1.14.0 | |
| Oracle Communications Design Studio | =7.4.2.0.0 | |
| Oracle Communications Messaging Server | =8.1 | |
| Oracle Helidon | =1.4.10 | |
| Oracle Helidon | =2.4.0 | |
| Oracle Jd Edwards Enterpriseone Tools | <9.2.6.3 | |
| Oracle Nosql Database | <21.1.12 | |
| Oracle Primavera Gateway | >=17.12.0<=17.12.11 | |
| Oracle Primavera Gateway | >=18.8.0<=18.8.11 | |
| Oracle Primavera Gateway | >=19.12.0<=19.12.10 | |
| Quarkus Quarkus | <=1.13.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32
- https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj
- https://github.com/netty/netty/commit/b0fa4d5aab4215f3c22ce6123dd8dd5f38dc0432
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21295
- https://nvd.nist.gov/vuln/detail/CVE-2021-21409
- https://www.debian.org/security/2021/dsa-4885
- https://lists.apache.org/thread.html/r2732aa3884cacfecac4c54cfaa77c279ba815cad44b464a567216f83@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r70c3a7bfa904f06a1902f4df20ee26e4f09a46b8fd3eb304dc57a2de@%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/ra66e93703e3f4bd31bdfd0b6fb0c32ae96b528259bb1aa2b6d38e401@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r0ca82fec33334e571fe5b388272260778883e307e15415d7b1443de2@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r101f82d8f3b5af0bf79aecbd5b2dd3b404f6bb51d1a54c2c3d29bed9@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r4a98827bb4a7edbd69ef862f2351391845697c40711820d10df52ca5@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r4b8be87acf5b9c098a2ee350b5ca5716fe7afeaf0a21a4ee45a90687@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r5cbea8614812289a9b98d0cfc54b47f54cef424ac98d5e315b791795@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r69efd8ef003f612c43e4154e788ca3b1f837feaacd16d97854402355@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r823d4b27fcba8dad5fe945bdefce3ca5a0031187966eb6ef3cc22ba9@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rac8cf45a1bab9ead5c9a860cbadd6faaeb7792203617b6ec3874736d@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rdd206d9dd7eb894cc089b37fe6edde2932de88d63a6d8368b44f5101@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rdd5715f3ee5e3216d5e0083a07994f67da6dbb9731ce9e7a6389b18e@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re4b0141939370304d676fe23774d0c6fbc584b648919825402d0cb39@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf521ff2be2e2dd38984174d3451e6ee935c845948845c8fccd86371d@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r1b3cb056364794f919aaf26ceaf7423de64e7fdd05a914066e7d5219@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r61564d86a75403b854cdafee67fc69c8b88c5f6802c2c838f4282cc8@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/rf38e4dcdefc7c59f7ba0799a399d6d6e37b555d406a1dfc2fcbf0b35@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r7879ddcb990c835c6b246654770d836f9d031dee982be836744e50ed@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898@%3Cdev.flink.apache.org%3E
- https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/rbde2f13daf4911504f0eaea43eee4f42555241b5f6d9d71564b6c5fa@%3Cjira.kafka.apache.org%3E
- https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/rafc77f9f03031297394f3d372ccea751b23576f8a2ae9b6b053894c5@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re1911e05c08f3ec2bab85744d788773519a0afb27272a31ac2a0b4e8@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re39391adcb863f0e9f3f15e7986255948f263f02e4700b82453e7102@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re9e6ed60941da831675de2f8f733c026757fb4fa28a7b6c9f3dfb575@%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/redef0fb5474fd686781007de9ddb852b24f1b04131a248d9a4789183@%3Cnotifications.zookeeper.apache.org%3E
- https://security.netapp.com/advisory/ntap-20210604-0003/
- https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5@%3Cissues.flink.apache.org%3E
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://lists.apache.org/thread.html/raa413040db6d2197593cc03edecfd168732e697119e6447b0a25d525@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rba2a9ef1d0af882ab58fadb336a58818495245dda43d32a7d7837187@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf148b2bf6c2754153a8629bc7495e216bd0bd4c915695486542a10b4@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3@%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc@%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d@%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb@%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b@%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/r6dac9bd799ceac499c7a7e152a9b0dc7f2fe7f89ec5605d129bb047b@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r31044fb995e894749cb821c6fe56f487c16a97028e6e360e59f09d58@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r5f2f120b2b8d099226473db1832ffb4d7c1d6dc2d228a164bf293a8e@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r7b54563abebe3dbbe421e1ba075c2030d8d460372f8c79b7789684b6@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r9ec78dc409f3f1edff88f21cab53737f36aad46f582a9825389092e0@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rcae42fba06979934208bbd515584b241d3ad01d1bb8b063512644362@%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r967002f0939e69bdec58f070735a19dd57c1f2b8f817949ca17cddae@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r9fe840c36b74f92b8d4a089ada1f9fd1d6293742efa18b10e06b66d2@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071@%3Ccommits.pulsar.apache.org%3E
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://github.com/advisories/GHSA-f256-j965-7f32 (Advisory)
- https://www.cve.org/CVERecord?id=CVE-2021-21409 https://nvd.nist.gov/vuln/detail/CVE-2021-21409 https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32
- https://bugzilla.redhat.com/show_bug.cgi?id=1944888
- https://access.redhat.com/errata/RHSA-2021:1511
- https://access.redhat.com/errata/RHSA-2021:2696
- https://access.redhat.com/errata/RHSA-2021:3660
- https://access.redhat.com/errata/RHSA-2021:5128
- https://access.redhat.com/errata/RHSA-2021:5127
- https://access.redhat.com/errata/RHSA-2021:5129
- https://access.redhat.com/errata/RHSA-2021:2689
- https://access.redhat.com/errata/RHSA-2021:3700
- https://access.redhat.com/errata/RHSA-2021:3225
- https://access.redhat.com/errata/RHSA-2021:2139
- https://access.redhat.com/errata/RHSA-2021:2755
- https://access.redhat.com/errata/RHSA-2021:2692
- https://access.redhat.com/errata/RHSA-2021:2693
- https://access.redhat.com/errata/RHSA-2021:2694
- https://access.redhat.com/errata/RHSA-2021:3658
- https://access.redhat.com/errata/RHSA-2021:3656
- https://access.redhat.com/errata/RHSA-2021:5134
- https://access.redhat.com/errata/RHSA-2022:5498
- https://access.redhat.com/errata/RHSA-2021:2965
- https://access.redhat.com/errata/RHSA-2021:2465
- https://access.redhat.com/errata/RHSA-2021:3880
- https://access.redhat.com/security/cve/CVE-2021-21409
- https://launchpad.net/bugs/cve/CVE-2021-21409
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1944890
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1944889
- https://access.redhat.com/security/cve/cve-2021-21409
- https://security-tracker.debian.org/tracker/CVE-2021-21409
- https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c%40%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r0ca82fec33334e571fe5b388272260778883e307e15415d7b1443de2%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r101f82d8f3b5af0bf79aecbd5b2dd3b404f6bb51d1a54c2c3d29bed9%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r1b3cb056364794f919aaf26ceaf7423de64e7fdd05a914066e7d5219%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r2732aa3884cacfecac4c54cfaa77c279ba815cad44b464a567216f83%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r31044fb995e894749cb821c6fe56f487c16a97028e6e360e59f09d58%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r4a98827bb4a7edbd69ef862f2351391845697c40711820d10df52ca5%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r4b8be87acf5b9c098a2ee350b5ca5716fe7afeaf0a21a4ee45a90687%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d%40%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a%40%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r5cbea8614812289a9b98d0cfc54b47f54cef424ac98d5e315b791795%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r5f2f120b2b8d099226473db1832ffb4d7c1d6dc2d228a164bf293a8e%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5%40%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r61564d86a75403b854cdafee67fc69c8b88c5f6802c2c838f4282cc8%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r69efd8ef003f612c43e4154e788ca3b1f837feaacd16d97854402355%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r6dac9bd799ceac499c7a7e152a9b0dc7f2fe7f89ec5605d129bb047b%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r70c3a7bfa904f06a1902f4df20ee26e4f09a46b8fd3eb304dc57a2de%40%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r7879ddcb990c835c6b246654770d836f9d031dee982be836744e50ed%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r7b54563abebe3dbbe421e1ba075c2030d8d460372f8c79b7789684b6%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r823d4b27fcba8dad5fe945bdefce3ca5a0031187966eb6ef3cc22ba9%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e%40%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r967002f0939e69bdec58f070735a19dd57c1f2b8f817949ca17cddae%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r9ec78dc409f3f1edff88f21cab53737f36aad46f582a9825389092e0%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r9fe840c36b74f92b8d4a089ada1f9fd1d6293742efa18b10e06b66d2%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898%40%3Cdev.flink.apache.org%3E
- https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb%40%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/ra66e93703e3f4bd31bdfd0b6fb0c32ae96b528259bb1aa2b6d38e401%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/raa413040db6d2197593cc03edecfd168732e697119e6447b0a25d525%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rac8cf45a1bab9ead5c9a860cbadd6faaeb7792203617b6ec3874736d%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rafc77f9f03031297394f3d372ccea751b23576f8a2ae9b6b053894c5%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rba2a9ef1d0af882ab58fadb336a58818495245dda43d32a7d7837187%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rbde2f13daf4911504f0eaea43eee4f42555241b5f6d9d71564b6c5fa%40%3Cjira.kafka.apache.org%3E
- https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3%40%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/rcae42fba06979934208bbd515584b241d3ad01d1bb8b063512644362%40%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc%40%3Cissues.kudu.apache.org%3E
- https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e%40%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/rdd206d9dd7eb894cc089b37fe6edde2932de88d63a6d8368b44f5101%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rdd5715f3ee5e3216d5e0083a07994f67da6dbb9731ce9e7a6389b18e%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re1911e05c08f3ec2bab85744d788773519a0afb27272a31ac2a0b4e8%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re39391adcb863f0e9f3f15e7986255948f263f02e4700b82453e7102%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re4b0141939370304d676fe23774d0c6fbc584b648919825402d0cb39%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324%40%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/re9e6ed60941da831675de2f8f733c026757fb4fa28a7b6c9f3dfb575%40%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/redef0fb5474fd686781007de9ddb852b24f1b04131a248d9a4789183%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf148b2bf6c2754153a8629bc7495e216bd0bd4c915695486542a10b4%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf38e4dcdefc7c59f7ba0799a399d6d6e37b555d406a1dfc2fcbf0b35%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/rf521ff2be2e2dd38984174d3451e6ee935c845948845c8fccd86371d%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b%40%3Cissues.kudu.apache.org%3E
- https://ubuntu.com/security/notices/USN-6049-1
- https://www.cve.org/CVERecord?id=CVE-2021-21409
- https://ubuntu.com/security/CVE-2021-21409
Parent vulnerabilities
(Appears in the following advisories)
- RHSA-2021:1511
- RHSA-2021:2696
- RHSA-2021:3660
- RHSA-2021:5128
- RHSA-2021:5127
- RHSA-2021:5129
- RHSA-2021:2689
- RHSA-2021:3700
- RHSA-2021:3225
- RHSA-2021:2139
- RHSA-2021:2755
- RHSA-2021:2692
- RHSA-2021:2693
- RHSA-2021:2694
- RHSA-2021:3658
- RHSA-2021:3656
- RHSA-2021:5134
- RHSA-2022:5498
- RHSA-2021:2965
- RHSA-2021:2465
- RHSA-2021:3880
- USN-6049-1
- collector/github-advisory-latest
- alias/GHSA-f256-j965-7f32
- alias/CVE-2021-21409
- collector/github-advisory
- collector/redhat-cve
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/launchpad-cve
- source/Launchpad
- agent/remedy
- agent/author
- agent/severity
- agent/weakness
- collector/redhat-bugzilla
- source/Red Hat
- agent/software-canonical-lookup
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/event
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-index
- package-manager/maven
- package-manager/redhat
- package-manager/debian
- package-manager/ubuntu
- vendor/netty
- canonical/netty netty
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/10.0
- vendor/netapp
- canonical/netapp oncommand api services
- canonical/netapp oncommand workflow automation
- vendor/oracle
- canonical/oracle banking corporate lending process management
- version/oracle banking corporate lending process management/14.2.0
- version/oracle banking corporate lending process management/14.3.0
- version/oracle banking corporate lending process management/14.5.0
- canonical/oracle banking credit facilities process management
- version/oracle banking credit facilities process management/14.2.0
- version/oracle banking credit facilities process management/14.3.0
- version/oracle banking credit facilities process management/14.5.0
- canonical/oracle banking trade finance process management
- version/oracle banking trade finance process management/14.2.0
- version/oracle banking trade finance process management/14.3.0
- version/oracle banking trade finance process management/14.5.0
- canonical/oracle coherence
- version/oracle coherence/12.2.1.4.0
- version/oracle coherence/14.1.1.0.0
- canonical/oracle communications brm - elastic charging engine
- version/oracle communications brm - elastic charging engine/12.0.0.3
- canonical/oracle communications cloud native core console
- version/oracle communications cloud native core console/1.7.0
- canonical/oracle communications cloud native core policy
- version/oracle communications cloud native core policy/1.14.0
- canonical/oracle communications design studio
- version/oracle communications design studio/7.4.2.0.0
- canonical/oracle communications messaging server
- version/oracle communications messaging server/8.1
- canonical/oracle helidon
- version/oracle helidon/1.4.10
- version/oracle helidon/2.4.0
- canonical/oracle jd edwards enterpriseone tools
- canonical/oracle nosql database
- canonical/oracle primavera gateway
- version/oracle primavera gateway/17.12.0
- version/oracle primavera gateway/17.12.11
- version/oracle primavera gateway/18.8.0
- version/oracle primavera gateway/18.8.11
- version/oracle primavera gateway/19.12.0
- version/oracle primavera gateway/19.12.10
- vendor/quarkus
- canonical/quarkus quarkus
- version/quarkus quarkus/1.13.7