- Vulnerability/
- USN-4600-1
USN-4600-1: Netty vulnerabilities
First published: Thu Oct 22 2020(Updated: )
It was discovered that Netty had HTTP request smuggling vulnerabilities. A remote attacker could used it to extract sensitive information. (CVE-2019-16869, CVE-2019-20444, CVE-2019-20445, CVE-2020-7238)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libnetty-3.9-java | <3.9.0.Final-1ubuntu0.1 | 3.9.0.Final-1ubuntu0.1 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-20444
- https://ubuntu.com/security/CVE-2019-16869
- https://ubuntu.com/security/CVE-2020-7238
- https://ubuntu.com/security/CVE-2019-20445
- https://ubuntu.com/security/notices/USN-4532-1
- https://ubuntu.com/security/notices/USN-4600-2
- https://launchpad.net/ubuntu/+source/netty-3.9/3.9.0.Final-1ubuntu0.1
- https://ubuntu.com/security/notices/USN-4600-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for these Netty vulnerabilities?
The vulnerability ID for these Netty vulnerabilities is CVE-2019-16869, CVE-2019-20444, CVE-2019-20445, CVE-2020-7238.
What is the severity of the Netty vulnerabilities?
The severity of the Netty vulnerabilities is not provided in the provided information.
How can a remote attacker exploit these Netty vulnerabilities?
A remote attacker can exploit these Netty vulnerabilities to perform HTTP request smuggling attacks and extract sensitive information.
Which software versions are affected by these Netty vulnerabilities?
The affected software version is libnetty-3.9-java version 3.9.0.Final-1ubuntu0.1 on Ubuntu 16.04.
How can I fix these Netty vulnerabilities?
To fix these Netty vulnerabilities, you should update the libnetty-3.9-java package to version 3.9.0.Final-1ubuntu0.1 or later.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-4532-1
- anchor-related/USN-4600-2
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/16.04