Vulnerabilities > CVE-2021-43797

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to "sanitize" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself. Users should upgrade to version 4.1.71.Final.

Vulnerable Configurations

Part	Description	Count
Application	Netty Netty Netty - Netty Netty 3.2.4 Netty Netty 3.2.5 Netty Netty 3.2.6 Netty Netty 3.2.7 Netty Netty 3.2.8 Netty Netty 3.2.9 Netty Netty 3.2.10 Netty Netty 3.3.0 Netty Netty 3.3.1 Netty Netty 3.4.0 Netty Netty 3.4.1 Netty Netty 3.4.2 Netty Netty 3.4.3 Netty Netty 3.4.4 Netty Netty 3.4.5 Netty Netty 3.4.6 Netty Netty 3.5.0 Netty Netty 3.5.1 Netty Netty 3.5.2 Netty Netty 3.5.3 Netty Netty 3.5.4 Netty Netty 3.5.5 Netty Netty 3.5.6 Netty Netty 3.5.7 Netty Netty 3.5.8 Netty Netty 3.5.9 Netty Netty 3.5.10 Netty Netty 3.5.11 Netty Netty 3.5.12 Netty Netty 3.5.13 Netty Netty 3.6.0 Netty Netty 3.6.1 Netty Netty 3.6.2 Netty Netty 3.6.3 Netty Netty 3.6.4 Netty Netty 3.6.5 Netty Netty 3.6.6 Netty Netty 3.6.7 Netty Netty 3.6.8 Netty Netty 3.6.9 Netty Netty 3.6.10 Netty Netty 3.7.0 Netty Netty 3.7.1 Netty Netty 3.8.0 Netty Netty 3.8.1 Netty Netty 3.8.2 Netty Netty 3.8.3 Netty Netty 3.9.0 Netty Netty 3.9.1 Netty Netty 3.9.1.1 Netty Netty 3.9.2 Netty Netty 3.9.3 Netty Netty 3.9.4 Netty Netty 3.9.5 Netty Netty 3.9.6 Netty Netty 3.9.7 Netty Netty 3.9.8 Netty Netty 3.9.9 Netty Netty 3.10.0 Netty Netty 3.10.1 Netty Netty 3.10.2 Netty Netty 3.10.3 Netty Netty 3.10.4 Netty Netty 3.10.5 Netty Netty 3.10.6 Netty Netty 4.0.0 Netty Netty 4.0.1 Netty Netty 4.0.2 Netty Netty 4.0.3 Netty Netty 4.0.4 Netty Netty 4.0.5 Netty Netty 4.0.6 Netty Netty 4.0.7 Netty Netty 4.0.8 Netty Netty 4.0.9 Netty Netty 4.0.10 Netty Netty 4.0.11 Netty Netty 4.0.12 Netty Netty 4.0.13 Netty Netty 4.0.14 Netty Netty 4.0.15 Netty Netty 4.0.16 Netty Netty 4.0.17 Netty Netty 4.0.18 Netty Netty 4.0.19 Netty Netty 4.0.20 Netty Netty 4.0.21 Netty Netty 4.0.22 Netty Netty 4.0.23 Netty Netty 4.0.24 Netty Netty 4.0.25 Netty Netty 4.0.26 Netty Netty 4.0.27 Netty Netty 4.0.28 Netty Netty 4.0.29 Netty Netty 4.0.30 Netty Netty 4.0.31 Netty Netty 4.0.32 Netty Netty 4.0.33 Netty Netty 4.0.34 Netty Netty 4.0.35 Netty Netty 4.0.36 Netty Netty 4.0.37 Netty Netty 4.0.38 Netty Netty 4.0.39 Netty Netty 4.0.40 Netty Netty 4.0.41 Netty Netty 4.0.42 Netty Netty 4.0.43 Netty Netty 4.0.44 Netty Netty 4.0.45 Netty Netty 4.0.46 Netty Netty 4.0.47 Netty Netty 4.0.48 Netty Netty 4.0.49 Netty Netty 4.0.50 Netty Netty 4.0.51 Netty Netty 4.0.52 Netty Netty 4.0.53 Netty Netty 4.0.54 Netty Netty 4.0.55 Netty Netty 4.0.56 Netty Netty 4.1 Netty Netty 4.1.0 Netty Netty 4.1.1 Netty Netty 4.1.2 Netty Netty 4.1.3 Netty Netty 4.1.4 Netty Netty 4.1.5 Netty Netty 4.1.6 Netty Netty 4.1.7 Netty Netty 4.1.8 Netty Netty 4.1.9 Netty Netty 4.1.10 Netty Netty 4.1.11 Netty Netty 4.1.12 Netty Netty 4.1.13 Netty Netty 4.1.14 Netty Netty 4.1.15 Netty Netty 4.1.16 Netty Netty 4.1.17 Netty Netty 4.1.18 Netty Netty 4.1.19 Netty Netty 4.1.20 Netty Netty 4.1.21 Netty Netty 4.1.22 Netty Netty 4.1.23 Netty Netty 4.1.24 Netty Netty 4.1.25 Netty Netty 4.1.26 Netty Netty 4.1.27 Netty Netty 4.1.28 Netty Netty 4.1.29 Netty Netty 4.1.30 Netty Netty 4.1.31 Netty Netty 4.1.32 Netty Netty 4.1.33 Netty Netty 4.1.34 Netty Netty 4.1.35 Netty Netty 4.1.36 Netty Netty 4.1.37 Netty Netty 4.1.38 Netty Netty 4.1.39 Netty Netty 4.1.40 Netty Netty 4.1.41 Netty Netty 4.1.42 Netty Netty 4.1.43 Netty Netty 4.1.44 Netty Netty 4.1.45 Netty Netty 4.1.46 Netty Netty 4.1.47 Netty Netty 4.1.48 Netty Netty 4.1.49 Netty Netty 4.1.50 Netty Netty 4.1.51 Netty Netty 4.1.52 Netty Netty 4.1.53 Netty Netty 4.1.54 Netty Netty 4.1.55 Netty Netty 4.1.56 Netty Netty 4.1.57 Netty Netty 4.1.58 Netty Netty 4.1.59 Netty Netty 4.1.60 Netty Netty 4.1.61 Netty Netty 4.1.62 Netty Netty 4.1.63 Netty Netty 4.1.64 Netty Netty 4.1.65 Netty Netty 4.1.66 Netty Netty 4.1.67 Netty Netty 4.1.68 Netty Netty 4.1.69 Netty Netty 4.1.70	239
Application	Quarkus Quarkus Quarkus 0.0.1 Quarkus Quarkus 0.1.0 Quarkus Quarkus 0.2.0 Quarkus Quarkus 0.3.0 Quarkus Quarkus 0.4.0 Quarkus Quarkus 0.5.0 Quarkus Quarkus 0.6.0 Quarkus Quarkus 0.7.0 Quarkus Quarkus 0.8.0 Quarkus Quarkus 0.9.0 Quarkus Quarkus 0.9.1 Quarkus Quarkus 0.10.0 Quarkus Quarkus 0.11.0 Quarkus Quarkus 0.12.0 Quarkus Quarkus 0.13.0 Quarkus Quarkus 0.13.1 Quarkus Quarkus 0.13.2 Quarkus Quarkus 0.13.3 Quarkus Quarkus 0.14.0 Quarkus Quarkus 0.15.0 Quarkus Quarkus 0.16.0 Quarkus Quarkus 0.16.1 Quarkus Quarkus 0.17.0 Quarkus Quarkus 0.18.0 Quarkus Quarkus 0.19.0 Quarkus Quarkus 0.19.1 Quarkus Quarkus 0.20.0 Quarkus Quarkus 0.21.0 Quarkus Quarkus 0.21.1 Quarkus Quarkus 0.21.2 Quarkus Quarkus 0.22.0 Quarkus Quarkus 0.23.0 Quarkus Quarkus 0.23.1 Quarkus Quarkus 0.23.2 Quarkus Quarkus 0.24.0 Quarkus Quarkus 0.25.0 Quarkus Quarkus 0.26.0 Quarkus Quarkus 0.26.1 Quarkus Quarkus 0.27.0 Quarkus Quarkus 0.28.0 Quarkus Quarkus 0.28.1 Quarkus Quarkus 1.0.0 Quarkus Quarkus 1.0.1 Quarkus Quarkus 1.1.0 Quarkus Quarkus 1.1.1 Quarkus Quarkus 1.2.0 Quarkus Quarkus 1.2.1 Quarkus Quarkus 1.3.0 Quarkus Quarkus 1.3.1 Quarkus Quarkus 1.3.2 Quarkus Quarkus 1.3.3 Quarkus Quarkus 1.3.4 Quarkus Quarkus 1.4.0 Quarkus Quarkus 1.4.1 Quarkus Quarkus 1.4.2 Quarkus Quarkus 1.5.0 Quarkus Quarkus 1.5.1 Quarkus Quarkus 1.5.2 Quarkus Quarkus 1.6.0 Quarkus Quarkus 1.6.1 Quarkus Quarkus 1.7.0 Quarkus Quarkus 1.7.1 Quarkus Quarkus 1.7.2 Quarkus Quarkus 1.7.3 Quarkus Quarkus 1.7.4 Quarkus Quarkus 1.7.5 Quarkus Quarkus 1.7.6 Quarkus Quarkus 1.8.0 Quarkus Quarkus 1.8.1 Quarkus Quarkus 1.8.2 Quarkus Quarkus 1.8.3 Quarkus Quarkus 1.9.0 Quarkus Quarkus 1.9.1 Quarkus Quarkus 1.9.2 Quarkus Quarkus 1.10.0 Quarkus Quarkus 1.10.1 Quarkus Quarkus 1.10.2 Quarkus Quarkus 1.10.3 Quarkus Quarkus 1.10.4 Quarkus Quarkus 1.10.5 Quarkus Quarkus 1.11.0 Quarkus Quarkus 1.11.1 Quarkus Quarkus 1.11.2 Quarkus Quarkus 1.11.3 Quarkus Quarkus 1.11.4 Quarkus Quarkus 1.11.5 Quarkus Quarkus 1.11.6 Quarkus Quarkus 1.11.7 Quarkus Quarkus 1.12.0 Quarkus Quarkus 1.12.1 Quarkus Quarkus 1.12.2 Quarkus Quarkus 1.13.0 Quarkus Quarkus 1.13.1 Quarkus Quarkus 1.13.2 Quarkus Quarkus 1.13.3 Quarkus Quarkus 1.13.4 Quarkus Quarkus 1.13.5 Quarkus Quarkus 1.13.6 Quarkus Quarkus 1.13.7 Quarkus Quarkus 2.0.0 Quarkus Quarkus 2.0.1 Quarkus Quarkus 2.0.2 Quarkus Quarkus 2.0.3 Quarkus Quarkus 2.1.0 Quarkus Quarkus 2.1.1 Quarkus Quarkus 2.1.2 Quarkus Quarkus 2.1.3 Quarkus Quarkus 2.1.4 Quarkus Quarkus 2.2.0 Quarkus Quarkus 2.2.1 Quarkus Quarkus 2.2.2 Quarkus Quarkus 2.2.3 Quarkus Quarkus 2.2.4 Quarkus Quarkus 2.2.5 Quarkus Quarkus 2.3.0 Quarkus Quarkus 2.3.1 Quarkus Quarkus 2.4.0 Quarkus Quarkus 2.4.1 Quarkus Quarkus 2.4.2 Quarkus Quarkus 2.5.0 Quarkus Quarkus 2.5.1 Quarkus Quarkus 2.5.2	168
Application	Netapp Netapp Snapcenter - Netapp Oncommand Workflow Automation -	2
Application	Oracle Oracle Banking Platform 2.6.2 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Coherence 12.2.1.4.0 Oracle Coherence 14.1.1.0.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Banking Party Management 2.7.0 Oracle Communications Design Studio 7.4.2 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 1.15.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Helidon 2.4.0 Oracle Helidon 1.4.10 Oracle Communications Instant Messaging Server 8.1 Oracle Banking Deposits AND Lines OF Credit Servicing 2.7	16
OS	Debian Debian Debian Linux 10.0 Debian Debian Linux 11.0	2

Vulnerabilities > CVE-2021-43797 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-43797"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2021-43797