HTTP/2 Rapid Reset Attack Vulnerability

Netty has Insufficient Bailiwick Validation for NS Records

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty: HttpClientCodec response desynchronization

Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be…

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass

Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion

Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3

Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS

Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation

Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention

Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection

Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass

Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing

Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

Netty: Memory Exhaustion in SctpMessageCompletionHandler

Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation

Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service

Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation

Netty SPDY SETTINGS frame count materializes unbounded settings map

Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder

Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length

Netty's wrapping plain trust manager silently disables hostname verification

Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

Netty: SCTP reassembly nests buffers without bound

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty's Default QUIC token handler accepts any client-supplied token

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size

Netty has Unbounded Direct Memory Consumption in its RedisDecoder

Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays

Netty: Resource exhaustion in MqttDecoder

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS