Known vulnerabilities in netty

Known vulnerabilities in netty

Vendor: openEuler

Software: netty

Software CPE: cpe:2.3:o:openeuler:netty:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 14

Public exploits: 2

Known exploited (KEV): 2

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117297 - Command injection CVE-2025-59419	CWE-77	Medium	No	No	4.1.13-21, 4.1.13-24	15.10.2025	SB20251015146 SB2025102483 SB2025102484 and 14 more
#VU87779 - Exposure of sensitive information to an unauthorized actor CVE-2024-29025	CWE-200	Medium	No	No	4.1.13-22	25.03.2024	SB2024032532 SB2024040230 SB2024042995 and 95 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881	CWE-835	Medium	No	No	4.1.13-18, 4.1.13-20, 4.1.13-21	12.12.2022	SB2022121215 SB2023011210 SB2023011757 and 74 more
#VU63127 - Resource exhaustion CVE-2021-37136	CWE-400	Medium	No	No	4.1.13-12	12.05.2022	SB2021101948 SB2022051235 SB2022060838 and 37 more
#VU62849 - Creation of Temporary File With Insecure Permissions CVE-2022-24823	CWE-378	Low	No	No	4.1.13-20, 4.1.13-23	09.05.2022	SB2022050902 SB2022063002 SB2022072013 and 56 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-43797	CWE-444	Medium	No	No	4.1.13-14, 4.1.13-17	02.04.2022	SB2021120923 SB2022040202 SB2022042223 and 50 more
#VU59924 - Improper input validation CVE-2021-37137	CWE-20	Medium	No	No	4.1.13-12	23.01.2022	SB2022012310 SB2022012745 SB2022012753 and 44 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	4.1.13-16	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	4.1.13-14, 4.1.13-15	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 170 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Available	Exploited	4.1.13-14, 4.1.13-15	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 179 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	4.1.13-14, 4.1.13-15	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 339 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-21409	CWE-444	Medium	No	No	4.1.13-11	01.04.2021	SB2021040116 SB2021040626 SB2021050706 and 33 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-21295	CWE-444	Medium	No	No	4.1.13-11	01.04.2021	SB2021040115 SB2021040626 SB2021050706 and 27 more
#VU51835 - Cleartext Storage of Sensitive Information CVE-2021-21290	CWE-312	Low	No	No	4.1.13-10, 4.1.13-20, 4.1.13-23	01.04.2021	SB2021020813 SB2021040626 SB2021050706 and 43 more