CVE-2019-20444

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2019-20444

CGA ID

CGA-c7h4-qrg3-25qm

Severity

9.1

Critical

CVSS V3

Description

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2019-20444

Severity

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources