Known vulnerabilities in netty (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
netty (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:netty_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1:4.1.48-9ubuntu0.2+esm2
1:4.0.34-1ubuntu0.1~esm5
1:4.1.7-4ubuntu0.1+esm7
1:4.1.45-1ubuntu0.1~esm7
1:4.1.48-4+deb11u2ubuntu0.2
1:4.1.48-9ubuntu0.2
1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1
1:4.0.34-1ubuntu0.1~esm4
1:4.1.7-4ubuntu0.1+esm6
1:4.1.45-1ubuntu0.1~esm6
1:4.1.48-4+deb11u2ubuntu0.1+esm3
1:4.1.48-9ubuntu0.1+esm3
1:4.1.48-16ubuntu0.1~esm2
1:4.0.34-1ubuntu0.1~esm3
1:4.1.7-4ubuntu0.1+esm5
1:4.1.45-1ubuntu0.1~esm4
1:4.1.48-10ubuntu0.25.04.2
1:4.1.48-10ubuntu0.25.10.2
1:4.1.7-4ubuntu0.1+esm4
1:4.1.45-1ubuntu0.1~esm3
1:4.1.48-4+deb11u2ubuntu0.1~esm2
1:4.1.48-9ubuntu0.1~esm2
1:4.1.48-10ubuntu0.25.04.1
1:4.1.48-10ubuntu0.25.10.1
1:4.1.48-10ubuntu0.1
1:4.1.48-10
1:4.1.48-9
1:4.1.48-8
1:4.1.48-7
1:4.1.48-6
1:4.1.48-5ubuntu0.1
1:4.1.48-5
1:4.1.48-4+deb11u2
1:4.1.48-4+deb11u2build0.22.04.1
1:4.1.48-3
1:4.1.48-4
1:4.1.48-4+deb11u1
1:4.1.48-4+deb11u1build0.22.04.1
1:4.1.48-2
1:4.1.45-2
1:4.1.48-1
1:4.1.45-1
1:4.1.7-4ubuntu0.1
4.1.48
4.1.48-1
4.1.45
4.1.45-1
4.1.33
4.1.33-1
4.1.7
4.1.7-4
4.0.34
4.0.34-1
3.2.6.Final
3.2.6.Final-2
1:4.1.33-3
1:4.1.33-2
JNI
3.1.0.CR1+dfsg-0ubuntu1
1:4.1.29-1
1:4.1.33-1
1:4.1.7-4
1:4.1.7-3
1:4.1.7-2
1:4.1.7-1
1:4.0.42-1
1:4.0.41-1
1:4.0.40-1
1:4.0.37-1
1:4.0.36-2
1:4.0.35-1
1:4.0.36-1
1:4.0.34-1
1:4.0.33-1
1:4.0.31-1
1:4.0.32-1
3.1.0.CR1-0ubuntu1
1:3.1.0.CR1-1
1:3.2.6.Final-1
1:3.2.6.Final-2
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU133444 - Insufficient Verification of Data Authenticity CVE-2026-47691 |
CWE-345 | High | 1:4.1.48-9ubuntu0.2+esm2 | 08.06.2026 |
SB2026060813 SB20260626101 SB2026070933 and 13 more |
||
| #VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-42581 |
CWE-444 | Medium | 1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1, 1:4.0.34-1ubuntu0.1~esm4, 1:4.1.7-4ubuntu0.1+esm6, 1:4.1.45-1ubuntu0.1~esm6, 1:4.1.48-4+deb11u2ubuntu0.1+esm3, 1:4.1.48-9ubuntu0.1+esm3, 1:4.1.48-16ubuntu0.1~esm2 | 05.05.2026 |
SB20260505124 SB2026052040 SB20260528254 and 18 more |
||
| #VU130213 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-42586 |
CWE-93 | High | 1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1, 1:4.0.34-1ubuntu0.1~esm4, 1:4.1.7-4ubuntu0.1+esm6, 1:4.1.45-1ubuntu0.1~esm6, 1:4.1.48-4+deb11u2ubuntu0.1+esm3, 1:4.1.48-9ubuntu0.1+esm3, 1:4.1.48-16ubuntu0.1~esm2 | 05.05.2026 |
SB20260505124 SB2026060936 SB2026060963 and 3 more |
||
| #VU130212 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-42578 |
CWE-113 | Medium | 1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1, 1:4.0.34-1ubuntu0.1~esm4, 1:4.1.7-4ubuntu0.1+esm6, 1:4.1.45-1ubuntu0.1~esm6, 1:4.1.48-4+deb11u2ubuntu0.1+esm3, 1:4.1.48-9ubuntu0.1+esm3, 1:4.1.48-16ubuntu0.1~esm2 | 05.05.2026 |
SB20260505124 SB2026051907 SB20260528254 and 9 more |
||
| #VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-42585 |
CWE-444 | Medium | 1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1, 1:4.0.34-1ubuntu0.1~esm4, 1:4.1.7-4ubuntu0.1+esm6, 1:4.1.45-1ubuntu0.1~esm6, 1:4.1.48-4+deb11u2ubuntu0.1+esm3, 1:4.1.48-9ubuntu0.1+esm3, 1:4.1.48-16ubuntu0.1~esm2 | 05.05.2026 |
SB20260505124 SB2026052040 SB20260528254 and 18 more |
||
| #VU130208 - Null Byte Interaction Error (Poison Null Byte) CVE-2026-42579 |
CWE-626 | Medium | 1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1, 1:4.0.34-1ubuntu0.1~esm4, 1:4.1.7-4ubuntu0.1+esm6, 1:4.1.45-1ubuntu0.1~esm6, 1:4.1.48-4+deb11u2ubuntu0.1+esm3, 1:4.1.48-9ubuntu0.1+esm3, 1:4.1.48-16ubuntu0.1~esm2 | 05.05.2026 |
SB20260505124 SB2026060936 SB2026060963 and 11 more |
||
| #VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-42584 |
CWE-444 | Medium | 1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1, 1:4.0.34-1ubuntu0.1~esm4, 1:4.1.7-4ubuntu0.1+esm6, 1:4.1.45-1ubuntu0.1~esm6, 1:4.1.48-4+deb11u2ubuntu0.1+esm3, 1:4.1.48-9ubuntu0.1+esm3, 1:4.1.48-16ubuntu0.1~esm2 | 05.05.2026 |
SB20260505124 SB2026052040 SB20260528254 and 18 more |
||
| #VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2025-67735 |
CWE-93 | Medium | 1:4.0.34-1ubuntu0.1~esm5, 1:4.1.7-4ubuntu0.1+esm7, 1:4.1.45-1ubuntu0.1~esm7, 1:4.1.48-4+deb11u2ubuntu0.2, 1:4.1.48-9ubuntu0.2 | 15.12.2025 |
SB2025121552 SB2025121974 SB2026012079 and 26 more |
||
| #VU117297 - Command injection CVE-2025-59419 |
CWE-77 | Medium | 1:4.1.7-4ubuntu0.1+esm4, 1:4.1.45-1ubuntu0.1~esm3, 1:4.1.48-4+deb11u2ubuntu0.1~esm2, 1:4.1.48-9ubuntu0.1~esm2, 1:4.1.48-10ubuntu0.25.04.1, 1:4.1.48-10ubuntu0.25.10.1 | 15.10.2025 |
SB20251015146 SB2025102483 SB2025102484 and 14 more |
||
| #VU114761 - Resource exhaustion CVE-2025-58057 |
CWE-400 | Medium | 1:4.0.34-1ubuntu0.1~esm3, 1:4.1.7-4ubuntu0.1+esm5, 1:4.1.45-1ubuntu0.1~esm4, 1:4.1.48-4+deb11u2ubuntu0.1~esm2, 1:4.1.48-9ubuntu0.1~esm2, 1:4.1.48-10ubuntu0.25.04.2, 1:4.1.48-10ubuntu0.25.10.2 | 03.09.2025 |
SB2025090340 SB2025090949 SB2025101530 and 47 more |
||
| #VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-58056 |
CWE-444 | Medium | 1:4.0.34-1ubuntu0.1~esm3, 1:4.1.7-4ubuntu0.1+esm5, 1:4.1.45-1ubuntu0.1~esm4, 1:4.1.48-4+deb11u2ubuntu0.1~esm2, 1:4.1.48-9ubuntu0.1~esm2, 1:4.1.48-10ubuntu0.25.04.2, 1:4.1.48-10ubuntu0.25.10.2 | 03.09.2025 |
SB2025090340 SB2025090949 SB20251008161 and 39 more |
||
| #VU114026 - Resource exhaustion CVE-2025-55163 |
CWE-400 | Medium | 1:4.0.34-1ubuntu0.1~esm5, 1:4.1.7-4ubuntu0.1+esm7, 1:4.1.45-1ubuntu0.1~esm7, 1:4.1.48-4+deb11u2ubuntu0.2, 1:4.1.48-9ubuntu0.2 | 13.08.2025 |
SB2025081378 SB2025081948 SB2025081949 and 71 more |