Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-43797

Fixed in a distro release EPSS 3%CVSS 6.5

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to "sanitize" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself. Users should upgrade to version 4.1.71.Final.

Published 2021-12-09 · CVE record · OSV

Products: netty

Fixed upstream

EcosystemPackageFixed in
Mavenio.netty:nettyno fix
Mavenio.netty:netty-codec-http4.1.71.Final
Mavenorg.jboss.netty:nettyno fix

Distro releases

ReleasePackageFixed in
Chainguarddruid0
Chainguarddruid-compat0
Chainguardhadoop-fips-3.3.63.3.6-r0
Chainguardhadoop-fips-3.3.6no fix
Chainguardhadoop-fips-3.4.2no fix
Chainguardhadoop-fips-3.5no fix
Debian 10netty1:4.1.33-1+deb10u3
Debian 11netty1:4.1.48-4+deb11u1
Debian 12netty1:4.1.48-6
Debian 13netty1:4.1.48-6
Debian 14netty1:4.1.48-6
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-cli0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-cli0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-commons0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-commons0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-core-client0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-core-client0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-dto0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-dto0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-hornetq-protocol0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-hornetq-protocol0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-hqclient-protocol0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-hqclient-protocol0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-jdbc-store0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-jdbc-store0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-jms-client0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-jms-client0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-jms-server0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-jms-server0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-journal0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-journal0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-ra0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-ra0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-selector0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-selector0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-server0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-server0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-service-extensions0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-service-extensions0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-tools0:2.16.0-9.redhat_00042.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-activemq-artemis-tools0:2.16.0-9.redhat_00042.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-h2database0:1.4.197-2.redhat_00004.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-h2database0:1.4.197-2.redhat_00004.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-hal-console0:3.3.12-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-hal-console0:3.3.12-1.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-jackson-databind0:2.12.6.1-1.redhat_00003.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-jackson-databind0:2.12.6.1-1.redhat_00003.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-jboss-xnio-base0:3.8.7-1.SP1_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-jboss-xnio-base0:3.8.7-1.SP1_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-all0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-all0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-buffer0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-buffer0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-dns0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-dns0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-haproxy0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-haproxy0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-http0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-http0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-http20:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-http20:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-memcache0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-memcache0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-mqtt0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-mqtt0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-redis0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-redis0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-smtp0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-smtp0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-socks0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-socks0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-stomp0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-stomp0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-xml0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-codec-xml0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-common0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-common0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-handler0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-handler0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-handler-proxy0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-handler-proxy0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-resolver0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-resolver0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-resolver-dns0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-resolver-dns0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-resolver-dns-classes-macos0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-resolver-dns-classes-macos0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-classes-epoll0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-classes-epoll0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-classes-kqueue0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-classes-kqueue0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-native-unix-common0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-native-unix-common0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-rxtx0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-rxtx0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-sctp0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-sctp0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-udt0:4.1.72-4.Final_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-netty-transport-udt0:4.1.72-4.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-undertow0:2.2.17-2.SP4_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-undertow0:2.2.17-2.SP4_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly0:7.4.5-3.GA_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly0:7.4.5-3.GA_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-client0:1.1.11-1.SP1_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-client0:1.1.11-1.SP1_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-client-common0:1.1.11-1.SP1_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-client-common0:1.1.11-1.SP1_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-ejb-client0:1.1.11-1.SP1_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-ejb-client0:1.1.11-1.SP1_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-naming-client0:1.1.11-1.SP1_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-naming-client0:1.1.11-1.SP1_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-transaction-client0:1.1.11-1.SP1_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-http-transaction-client0:1.1.11-1.SP1_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-java-jdk110:7.4.5-3.GA_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-java-jdk80:7.4.5-3.GA_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-javadocs0:7.4.5-3.GA_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-javadocs0:7.4.5-3.GA_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-modules0:7.4.5-3.GA_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-wildfly-modules0:7.4.5-3.GA_redhat_00001.1.el7eap
Red Hat jboss enterprise application platform 7.4eap7-xerces-j20:2.12.0-3.SP04_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 7.4eap7-xerces-j20:2.12.0-3.SP04_redhat_00001.1.el7eap
Red Hat red hat single sign on 7.5rh-sso7-keycloak0:15.0.8-1.redhat_00001.1.el8sso
Red Hat red hat single sign on 7.5rh-sso7-keycloak0:15.0.8-1.redhat_00001.1.el7sso
Red Hat red hat single sign on 7.5rh-sso7-keycloak-server0:15.0.8-1.redhat_00001.1.el8sso
Red Hat red hat single sign on 7.5rh-sso7-keycloak-server0:15.0.8-1.redhat_00001.1.el7sso
Red Hat red hat single sign on 7.6rh-sso70:1-5.el9sso
Red Hat red hat single sign on 7.6rh-sso7-javapackages-filesystem0:6.0.0-7.el9sso
Red Hat red hat single sign on 7.6rh-sso7-javapackages-tools0:6.0.0-7.el9sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak0:18.0.3-1.redhat_00001.1.el7sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak0:18.0.3-1.redhat_00001.1.el8sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak0:18.0.3-1.redhat_00001.1.el9sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak-server0:18.0.3-1.redhat_00001.1.el7sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak-server0:18.0.3-1.redhat_00001.1.el9sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak-server0:18.0.3-1.redhat_00001.1.el8sso
Red Hat red hat single sign on 7.6rh-sso7-python3-javapackages0:6.0.0-7.el9sso
Red Hat red hat single sign on 7.6rh-sso7-runtime0:1-5.el9sso
Red Hat satellite 6.11candlepin0:4.1.13-1.el8sat
Red Hat satellite 6.11candlepin0:4.1.13-1.el7sat
Red Hat satellite 6.11foreman0:3.1.1.21-2.el7sat
Red Hat satellite 6.11foreman0:3.1.1.21-2.el8sat
Red Hat satellite 6.11libsolv0:0.7.22-1.el8pc
Red Hat satellite 6.11libsolv0:0.7.22-1.el7pc
Red Hat satellite 6.11python-django0:3.2.13-1.el8pc
Red Hat satellite 6.11python-lxml0:4.7.1-1.el8pc
Red Hat satellite 6.11python-sqlparse0:0.4.2-2.el8pc
Red Hat satellite 6.11python38-django0:3.2.13-1.el8pc
Red Hat satellite 6.11rubygem-actionpack0:6.0.4.7-1.el8sat
Red Hat satellite 6.11rubygem-puma0:5.6.2-1.el8sat
Red Hat satellite 6.11rubygem-puma-debuginfo0:5.6.2-1.el8sat
Red Hat satellite 6.11rubygem-puma-debugsource0:5.6.2-1.el8sat
Red Hat satellite 6.11rubygem-sidekiq0:5.2.10-1.el8sat
Red Hat satellite 6.11satellite0:6.11.0-2.el8sat
Red Hat satellite 6.11satellite0:6.11.0-2.el7sat
Red Hat satellite 6.11tfm-rubygem-actionpack0:6.0.4.7-1.el7sat
Red Hat satellite 6.11tfm-rubygem-puma0:5.6.2-1.el7sat
Red Hat satellite 6.11tfm-rubygem-puma-debuginfo0:5.6.2-1.el7sat
Red Hat satellite 6.11tfm-rubygem-sidekiq0:5.2.10-1.el7sat
Red Hat satellite capsule 6.11foreman0:3.1.1.21-2.el7sat
Red Hat satellite capsule 6.11foreman0:3.1.1.21-2.el8sat
Red Hat satellite capsule 6.11libsolv0:0.7.22-1.el7pc
Red Hat satellite capsule 6.11libsolv0:0.7.22-1.el8pc
Red Hat satellite capsule 6.11python-django0:3.2.13-1.el8pc
Red Hat satellite capsule 6.11python-lxml0:4.7.1-1.el8pc
Red Hat satellite capsule 6.11python-sqlparse0:0.4.2-2.el8pc
Red Hat satellite capsule 6.11python38-django0:3.2.13-1.el8pc
Red Hat satellite capsule 6.11satellite0:6.11.0-2.el7sat
Red Hat satellite capsule 6.11satellite0:6.11.0-2.el8sat
Red Hat satellite utils 6.11foreman0:3.1.1.21-2.el8sat
Red Hat satellite utils 6.11foreman0:3.1.1.21-2.el7sat
Red Hat satellite utils 6.11satellite0:6.11.0-2.el7sat
Red Hat satellite utils 6.11satellite0:6.11.0-2.el8sat
Rocky Linux 8libdb0:5.3.28-42.el8_4
SUSE Linux Enterprise Module for Development Tools 15 SP3netty33.10.6-150200.3.3.2
SUSE Linux Enterprise Module for Development Tools 15 SP4netty33.10.6-150200.3.3.2
Ubuntu 22.04 LTSnetty1:4.1.48-4+deb11u1build0.22.04.1
Ubuntu Pro 14.04 LTSnettyno fix
Ubuntu Pro 16.04 LTSnetty1:4.0.34-1ubuntu0.1~esm1
Ubuntu Pro 18.04 LTSnetty1:4.1.7-4ubuntu0.1+esm2
Ubuntu Pro 20.04 LTSnetty1:4.1.45-1ubuntu0.1~esm1
Wolfidruid0
Wolfidruid-compat0
openSUSE Leap 15.3netty4.1.75-150200.4.6.2
openSUSE Leap 15.3netty33.10.6-150200.3.3.2
openSUSE Leap 15.4netty33.10.6-150200.3.3.2
openSUSE Tumbleweednetty4.1.72-1.1
openSUSE Tumbleweednetty33.10.6-9.1