netty netty CVE-2019-20445 vulnerability in Netty and Other Products
Published on January 29, 2020

product logo product logo product logo product logo product logo
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
YES
Technical Impact:
TOTAL

Products Associated with CVE-2019-20445

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-20445 are published in these products:

Exploit Probability

EPSS
13.83%
Percentile
96.54%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.