HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be…
Priority MEDIUM 62CWE-444Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Partial Red Hat: 18 fixed, 8 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.13834 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial io.netty:netty-handler (Maven): 4.1.45Red Hat: 20 advisoriesRed Hat: 18 fixed, 8 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | io.netty:netty-handler (Maven) | 4.0.0 to before 4.1.45 | 4.1.45 | Patch available | GHSA-p2v9-g2qv-p635 |
| — | org.jboss.netty:netty (Maven) | all versions | — | No fix listed | GHSA-p2v9-g2qv-p635 |
| — | io.netty:netty (Maven) | all versions | — | No fix listed | GHSA-p2v9-g2qv-p635 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- io.netty:netty-handler (Maven) Vendor— Affected 4.0.0 to before 4.1.45 Fixed in 4.1.45 Patch available GHSA-p2v9-g2qv-p635
- org.jboss.netty:netty (Maven) Vendor— Affected all versions Fixed in — No fix listed GHSA-p2v9-g2qv-p635
- io.netty:netty (Maven) Vendor— Affected all versions Fixed in — No fix listed GHSA-p2v9-g2qv-p635
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:* | before 4.1.44 | Vulnerable | netty |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
| cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* | 33 | Vulnerable | Fedoraproject |
| cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* | 18.04 | Vulnerable | Canonical |
| cpe:2.3:a:redhat:jboss_amq_clients:2:*:*:*:*:*:*:* | 2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Running on | Red Hat |
- cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:* Versions before 4.1.44 Vulnerable ·netty
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* Versions 33 Vulnerable ·Fedoraproject
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
- cpe:2.3:a:redhat:jboss_amq_clients:2:*:*:*:*:*:*:* Versions 2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·Red Hat
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Running on | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Running on | Red Hat |
| cpe:2.3:a:apache:spark:2.4.7:*:*:*:*:*:*:* | 2.4.7 | Vulnerable | Apache |
| cpe:2.3:a:apache:spark:2.4.8:*:*:*:*:*:*:* | 2.4.8 | Vulnerable | Apache |
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Running on ·Red Hat
- cpe:2.3:a:apache:spark:2.4.7:*:*:*:*:*:*:* Versions 2.4.7 Vulnerable ·Apache
- cpe:2.3:a:apache:spark:2.4.8:*:*:*:*:*:*:* Versions 2.4.8 Vulnerable ·Apache
Remediation
- Fix · GHSA-p2v9-g2qv-p635 io.netty:netty-handler (Maven) Fixed in 4.1.45 Advisory →
Red Hat 20 advisories
- RHSA-2024:5856 Released 2024-08-26 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server eap7-apache-commons-beanutils-1.9.4-1.redhat_00002.1.ep7.el7, eap7-infinispan-8.2.11-1.SP2_redhat_00001.1.ep7.el7, eap7-infinispan-cachestore-jdbc-8.2.11-1.SP2_redhat_00001.1.ep7.el7 +12
- RHSA-2021:3140 Released 2021-08-11 · Red Hat rating ModerateRed Hat Fuse 7.9.0 release and security update
- Red Hat Fuse 7.9
- RHSA-2020:3197 Released 2020-07-29 · Red Hat rating ImportantRed Hat Process Automation Manager 7.8.0 Security Update
- Red Hat Process Automation 7
Show 17 more Red Hat advisories
- RHSA-2020:3196 Released 2020-07-29 · Red Hat rating ImportantRed Hat Decision Manager 7.8.0 Security Update
- Red Hat Decision Manager 7
- RHSA-2020:3192 Released 2020-07-28 · Red Hat rating ImportantRed Hat Fuse 7.7.0 release and security update
- Red Hat Fuse 7.7.0
- RHSA-2020:2333 Released 2020-05-28 · Red Hat rating ImportantEAP Continuous Delivery Technical Preview Release 19 security update
- EAP-CD 19 Tech Preview
- RHSA-2020:2321 Released 2020-05-26 · Red Hat rating ImportantRed Hat Data Grid 7.3.6 security update
- Red Hat Data Grid 7.3.6
- RHSA-2020:1445 Released 2020-04-14 · Red Hat rating ImportantRed Hat AMQ Broker 7.4.3 release and security update
- Red Hat AMQ 7.4.3
- RHSA-2020:0951 Released 2020-03-23 · Red Hat rating ImportantRed Hat Single Sign-On 7.3.7 security update
- Red Hat Single Sign-On 7.3
- RHSA-2020:0939 Released 2020-03-23 · Red Hat rating ImportantRed Hat AMQ Streams 1.4.0 release and security update
- Red Hat AMQ Streams 1
- RHSA-2020:0922 Released 2020-03-23 · Red Hat rating ImportantRed Hat AMQ Broker 7.6 release and security update
- Red Hat AMQ
- RHSA-2020:0805 Released 2020-03-12 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 7 security update
- Red Hat JBoss EAP 7.2 for RHEL 7 Server eap7-activemq-artemis-2.9.0-2.redhat_00009.1.el7eap, eap7-activemq-artemis-cli-2.9.0-2.redhat_00009.1.el7eap, eap7-activemq-artemis-commons-2.9.0-2.redhat_00009.1.el7eap +47
- RHSA-2020:0804 Released 2020-03-12 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 6 security update
- Red Hat JBoss EAP 7.2 for RHEL 6 Server eap7-activemq-artemis-2.9.0-2.redhat_00009.1.el6eap, eap7-activemq-artemis-cli-2.9.0-2.redhat_00009.1.el6eap, eap7-activemq-artemis-commons-2.9.0-2.redhat_00009.1.el6eap +47
- RHSA-2020:0806 Released 2020-03-12 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 8 security update
- Red Hat JBoss EAP 7.2 for RHEL 8 eap7-activemq-artemis-2.9.0-2.redhat_00009.1.el8eap, eap7-activemq-artemis-cli-2.9.0-2.redhat_00009.1.el8eap, eap7-activemq-artemis-commons-2.9.0-2.redhat_00009.1.el8eap +47
- RHSA-2020:0811 Released 2020-03-12 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.2.7 security update
- Red Hat JBoss EAP 7.2
- RHSA-2020:0567 Released 2020-03-03 · Red Hat rating ImportantRed Hat build of Eclipse Vert.x 3.8.5 security update
- Text-Only RHOAR
- RHSA-2020:0605 Released 2020-02-25 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.2 security update
- Red Hat JBoss EAP 7.2 for RHEL 6 Server eap7-netty-4.1.45-1.Final_redhat_00001.1.el6eap, eap7-netty-all-4.1.45-1.Final_redhat_00001.1.el6eap
- Red Hat JBoss EAP 7.2 for RHEL 7 Server eap7-netty-4.1.45-1.Final_redhat_00001.1.el7eap, eap7-netty-all-4.1.45-1.Final_redhat_00001.1.el7eap
- Red Hat JBoss EAP 7.2 for RHEL 8 eap7-netty-4.1.45-1.Final_redhat_00001.1.el8eap, eap7-netty-all-4.1.45-1.Final_redhat_00001.1.el8eap
- RHSA-2020:0606 Released 2020-02-25 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.2 security update
- Red Hat JBoss EAP 7.2
- RHSA-2020:0601 Released 2020-02-25 · Red Hat rating ImportantAMQ Clients 2.6.0 Release
- Red Hat AMQ Clients 2 nodejs-rhea-1.0.16-1.el8, python-qpid-proton-0.30.0-2.el7, python-qpid-proton-0.30.0-4.el6_10 +32
- RHSA-2020:0497 Released 2020-02-13 · Red Hat rating ImportantAMQ Online security update
- Red Hat AMQ Online 1.3.3 GA
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat JBoss A-MQ 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Enterprise Application Platform 5 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Enterprise Application Platform 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Fuse 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Operations Network 3 | Affected | No fix planned: Out of support scope |
| Red Hat OpenShift Container Platform 3.11 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 4 | Affected | No fix planned: Will not fix |
| Red Hat Satellite 6 | Affected | No fix planned: Will not fix |
| EAP-CD 19 Tech Preview | Fixed | RHSA-2020:2333 |
| Red Hat AMQ | Fixed | RHSA-2020:0922 |
| Red Hat AMQ 7.4.3 | Fixed | RHSA-2020:1445 |
| Red Hat AMQ Clients 2 | Fixed | RHSA-2020:0601 |
| Red Hat AMQ Online 1.3.3 GA | Fixed | RHSA-2020:0497 |
| Red Hat AMQ Streams 1 | Fixed | RHSA-2020:0939 |
| Red Hat Data Grid 7.3.6 | Fixed | RHSA-2020:2321 |
| Red Hat Decision Manager 7 | Fixed | RHSA-2020:3196 |
| Red Hat Fuse 7.7.0 | Fixed | RHSA-2020:3192 |
| Red Hat Fuse 7.9 | Fixed | RHSA-2021:3140 |
| Red Hat JBoss EAP 7.2 | Fixed | RHSA-2020:0606 |
| Red Hat JBoss EAP 7.2 for RHEL 6 Server | Fixed | RHSA-2020:0605, RHSA-2020:0804 |
| Red Hat JBoss EAP 7.2 for RHEL 7 Server | Fixed | RHSA-2020:0605, RHSA-2020:0805 |
| Red Hat JBoss EAP 7.2 for RHEL 8 | Fixed | RHSA-2020:0605, RHSA-2020:0806 |
| Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server | Fixed | RHSA-2024:5856 |
| Red Hat Process Automation 7 | Fixed | RHSA-2020:3197 |
| Red Hat Single Sign-On 7.3 | Fixed | RHSA-2020:0951 |
| Text-Only RHOAR | Fixed | RHSA-2020:0567 |
Not affected: 1 product
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server
Timeline
- 2026-10-02 Threatist record created from CVE-2019-20445
- 2026-10-03 Alias added: GHSA-p2v9-g2qv-p635
- 2026-10-08 CISA SSVC decision points changed
References
Advisory 17
- RHSA-2020:0497
- [debian-lts-announce] 20200219 [SECURITY] [DLA 2109-1] netty security update
- [debian-lts-announce] 20200219 [SECURITY] [DLA 2110-1] netty-3.9 security update
- RHSA-2020:0601
- RHSA-2020:0606
- RHSA-2020:0605
- RHSA-2020:0567
- RHSA-2020:0806
- RHSA-2020:0811
- RHSA-2020:0804
- RHSA-2020:0805
- [debian-lts-announce] 20200904 [SECURITY] [DLA 2365-1] netty-3.9 security update
- [debian-lts-announce] 20200904 [SECURITY] [DLA 2364-1] netty security update
- USN-4532-1
- FEDORA-2020-66b5f85ccc
- DSA-4885
- https://nvd.nist.gov/vuln/detail/CVE-2019-20445
Other 76
- [druid-commits] 20200131 [GitHub] [druid] ccaominh commented on a change in pull request #9300: Fix / suppress netty CVEs CVE-2019-20445 and CVE-2019-20444
- [druid-commits] 20200131 [GitHub] [druid] zachjsh opened a new pull request #9300: Fix / suppress netty CVEs CVE-2019-20445 and CVE-2019-20444
- [druid-commits] 20200131 [GitHub] [druid] gianm merged pull request #9300: Fix / suppress netty CVEs CVE-2019-20445 and CVE-2019-20444
- [zookeeper-issues] 20200203 [jira] [Created] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- [zookeeper-dev] 20200203 [jira] [Created] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- [zookeeper-dev] 20200203 Re: [VOTE] Apache ZooKeeper release 3.6.0 candidate 1
- [zookeeper-issues] 20200203 [jira] [Assigned] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b%40%3Cnotifications.zookeeper.apache.org%3E
- [zookeeper-issues] 20200203 [jira] [Updated] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- [zookeeper-issues] 20200203 [jira] [Commented] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60%40%3Ccommits.zookeeper.apache.org%3E
- [zookeeper-issues] 20200204 [jira] [Resolved] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- [zookeeper-issues] 20200209 [jira] [Updated] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- https://lists.apache.org/thread.html/r819aaeb9944bdcfca438dcc51f05650dc728daf64dfd7d774fc2499b%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rb84c57670ec48ef23f4d07973b7fa69f629b8e7fcfb48874362feb6f%40%3Ccommits.zookeeper.apache.org%3E
- [zookeeper-issues] 20200209 [jira] [Commented] (ZOOKEEPER-3716) upgrade netty 4.1.42 to address CVE-2019-20444 CVE-2019-20445
- [cassandra-commits] 20200218 [jira] [Created] (CASSANDRA-15590) Upgrade io.netty_netty-all dependency to fix security vulnerabilities
- [spark-issues] 20200309 [jira] [Created] (SPARK-31095) Upgrade netty version to fix security vulnerabilities
- [spark-reviews] 20200310 [GitHub] [spark] dongjoon-hyun commented on issue #27870: [SPARK-31095][BUILD][2.4] Upgrade netty-all to 4.1.47.Final
- [geode-dev] 20200408 Proposal to bring GEODE-7969 to support/1.12
- [geode-dev] 20200408 Re: Proposal to bring GEODE-7969 to support/1.12
- [flume-issues] 20200410 [jira] [Created] (FLUME-3363) CVE-2019-20445
- [flume-issues] 20200415 [jira] [Updated] (FLUME-3363) CVE-2019-20445
- [flume-issues] 20200422 [jira] [Commented] (FLUME-3363) CVE-2019-20445
- [cassandra-commits] 20200604 [jira] [Created] (CASSANDRA-15856) Security vulnerabilities with dependency jars of Cassandra 3.11.6
- [bookkeeper-issues] 20200729 [GitHub] [bookkeeper] padma81 opened a new issue #2387: Security vulnerabilities in the apache/bookkeeper-4.9.2 image
- [flink-issues] 20200910 [jira] [Created] (FLINK-19195) question on security vulnerabilities in flink
- [flink-dev] 20200910 [jira] [Created] (FLINK-19195) question on security vulnerabilities in flink
- [pulsar-commits] 20201215 [GitHub] [pulsar] yanshuchong opened a new issue #8967: CVSS issue list
- [pulsar-commits] 20210120 [GitHub] [pulsar] fmiguelez opened a new issue #9249: Upgrade Netty dependency in broker to solve vulnerabilities: CVE-2019-16869, CVE-2020-11612, CVE-2019-20445, CVE-2019-20444
- [pulsar-commits] 20210121 [GitHub] [pulsar] hpvd commented on issue #9249: Upgrade Netty dependency in broker to solve vulnerabilities: CVE-2019-16869, CVE-2020-11612, CVE-2019-20445, CVE-2019-20444
- [pulsar-commits] 20210122 [GitHub] [pulsar] hpvd commented on issue #9249: Upgrade Netty dependency in broker to solve vulnerabilities: CVE-2019-16869, CVE-2020-11612, CVE-2019-20445, CVE-2019-20444
- [flink-issues] 20210426 [jira] [Commented] (FLINK-22441) In Flink v1.11.3 contains netty(version:3.10.6) netty(version:4.1.60) . There are many vulnerabilities, like CVE-2021-21409 etc. please confirm these version and fix. thx
- [spark-issues] 20210824 [jira] [Created] (SPARK-36572) Upgrade version of io.netty to 4.1.44.Final to solve CVE-2019-20444 and CVE-2019-20445
- https://github.com/netty/netty/pull/9865
- https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rbdb59c683d666130906a9c05a1d2b034c4cc08cda7ed41322bd54fe2@%3Cissues.flume.apache.org%3E
- https://lists.apache.org/thread.html/rb84c57670ec48ef23f4d07973b7fa69f629b8e7fcfb48874362feb6f@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rb5c065e7bd701b0744f9f28ad769943f91745102716c1eb516325f11@%3Cissues.spark.apache.org%3E
- https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/ra9fbfe7d4830ae675bf34c7c0f8c22fc8a4099f65706c1bc4f54c593@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/ra2ace4bcb5cf487f72cbcbfa0f8cc08e755ec2b93d7e69f276148b08@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/ra1a71b576a45426af5ee65255be9596ff3181a342f4ba73b800db78f@%3Cdev.geode.apache.org%3E
- https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r96e08f929234e8ba1ef4a93a0fd2870f535a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E
- https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E
- https://lists.fedoraproject.org/archives/list/[email protected]/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46
- https://usn.ubuntu.com/4532-1
- https://github.com/netty/netty
- https://lists.apache.org/thread.html/r030beff88aeb6d7a2d6cd21342bd18686153ce6e26a4171d0e035663@%3Cissues.flume.apache.org%3E
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/r1fcccf8bdb3531c28bc9aa605a6a1bea7e68cef6fc12e01faafb2fb5@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r205937c85817a911b0c72655c2377e7a2c9322d6ef6ce1b118d34d8d@%3Cdev.geode.apache.org%3E
- https://lists.apache.org/thread.html/r2f2989b7815d809ff3fda8ce330f553e5f133505afd04ffbc135f35f@%3Cissues.spark.apache.org%3E
- https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r46f93de62b1e199f3f9babb18128681677c53493546f532ed88c359d@%3Creviews.spark.apache.org%3E
- https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/r4ff40646e9ccce13560458419accdfc227b8b6ca4ead3a8a91decc74@%3Cissues.flume.apache.org%3E
- https://lists.apache.org/thread.html/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r6945f3c346b7af89bbd3526a7c9b705b1e3569070ebcd0964bcedd7d@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb185e04df852b0dd5fe53cf5b6138f9@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r81700644754e66ffea465c869cb477de25f8041e21598e8818fc2c45@%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r819aaeb9944bdcfca438dcc51f05650dc728daf64dfd7d774fc2499b@%3Ccommits.zookeeper.apache.org%3E
Sources
- CVE-2019-20445 · CVE Program
- CVE-2019-20445 · NVD
- FIRST EPSS
- GHSA-p2v9-g2qv-p635 · GitHub Advisory Database · CC BY 4.0
- CVE-2019-20445 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences