Netty HttpObjectDecoder.java 环境问题漏洞

<a href="http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202001-1318" target="_blank">http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202001-1318</a><br/>

Netty是Netty社区的一款非阻塞I/O客户端-服务器框架，它主要用于开发Java网络应用程序，如协议服务器和客户端等。Netty 4.1.44之前版本中的HttpObjectDecoder.java文件存在环境问题漏洞。该漏洞源于网络系统或产品的环境因素不合理。

来源:github.com

链接:https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final


来源:github.com

链接:https://github.com/netty/netty/issues/9861


来源:lists.apache.org

链接:https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E


来源:lists.apache.org

链接:https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E


来源:lists.apache.org

链接:https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E


来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0497


来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/156325/Red-Hat-Security-Advisory-2020-0497-01.html


来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-20445


来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0504/