Skip to content
COOEY

EXPOSURES › CVE-2019-20445

CVE-2019-20445

CRITICAL
DETAIL
SourceNVD · cve Published2020-01-29 CVSS9.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-20445 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
apache · vendorcanonical · vendordebian · vendorfedoraproject · vendornetty · vendorredhat · vendorSpark · productdebian linux · productenterprise linux · productfedora · productjboss amq clients · productjboss enterprise application platform · productnetty · productubuntu linux · product
DESCRIPTION

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No public sentiment data available; only technical facts and a failed search query.
cooey ↗ neutral +0.00
Neutral; only technical description provided.
"HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header."
127.0.0.1 ↗ neutral +0.00
Neutral; no content available.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.