Known vulnerabilities in netty (Debian package)

Vendor: Debian
Software: netty (Debian package)
Software CPE: cpe:2.3:o:debian:netty_debian_package:*:*:*:*:*:debian_linux:*:*
Website: https://www.debian.org/
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting netty (Debian package) netty (Debian package) is affected by 21 known vulnerabilities: 1 high, 19 medium, 1 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735		 CWE-93 Medium
No
No
 1:4.1.48-7+deb12u2, 1:4.1.48-10+deb13u1 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 21 more
#VU117297 - Command injection
CVE-2025-59419		 CWE-77 Medium
No
No
 1:4.1.48-7+deb12u2, 1:4.1.48-10+deb13u1 15.10.2025 SB20251015146
SB2025102483
SB2025102484
and 14 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 1:4.1.48-7+deb12u2, 1:4.1.48-10+deb13u1 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 1:4.1.48-7+deb12u2, 1:4.1.48-10+deb13u1 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 1:4.1.48-7+deb12u2, 1:4.1.48-10+deb13u1 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 70 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 1:4.1.48-7+deb12u2, 1:4.1.48-10+deb13u1 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1:4.1.48-4+deb11u2, 1:4.1.48-7+deb12u1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 1:4.1.48-4+deb11u2, 1:4.1.48-7+deb12u1 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915		 CWE-113 Medium
No
No
 1:4.1.48-4+deb11u1 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 1:4.1.48-4+deb11u1 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 1:4.1.48-4+deb11u1 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 36 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 1:4.1.48-4+deb11u1 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 1:4.1.48-4+deb11u1 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 1:4.1.33-1+deb10u2 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 1:4.1.33-1+deb10u2 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 1:4.1.33-1+deb10u2 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 1:4.1.33-1+deb10u2 04.05.2020 SB2020050435
SB2020073033
SB2021012210
and 35 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445		 CWE-113 Medium
No
No
 1:4.1.33-1+deb10u2 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 1:4.1.33-1+deb10u2 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 1:4.1.33-1+deb10u2 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more


Showing elements 1 - 20 out of 21