Known vulnerabilities in Netty 4.0.0

Software: Netty
Version: 4.0.0
Software CPE: cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Netty version 4.0.0 Netty 4.0.0 is affected by 13 vulnerabilities: 1 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114026 - Resource exhaustion
CVE-2025-55163
CWE-400 Medium
No
No
4.1.124, 4.2.4 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU103769 - Resource exhaustion
CVE-2025-25193
CWE-400 Low
No
No
4.1.118 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU100259 - Resource Management Errors
CVE-2024-47535
CWE-399 Low
No
No
4.1.115 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Public exploit available
Exploited
4.1.100 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
4.1.94 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915
CWE-113 Medium
No
No
4.1.86 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881
CWE-835 Medium
No
No
4.1.86 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
4.1.78 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 56 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409
CWE-444 Medium
No
No
4.1.61 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 33 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295
CWE-444 Medium
No
No
4.1.60 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 27 more
#VU38060 - Improper input validation
CVE-2015-2156
CWE-20 Medium
No
No
- 18.10.2017 SB2017101815
SB2022072128
SB2024052918
and 6 more
#VU39198 - Improper input validation
CVE-2016-4970
CWE-20 Medium
No
No
- 13.04.2017 SB2017041313
SB20260917212
#VU41720 - Resource Management Errors
CVE-2014-0193
CWE-399 Medium
No
No
- 06.05.2014 SB2014050603
SB2022072128
SB2024090430
and 3 more