CWE-1035.

Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

• Red Hat Build of Debezium 3.6
• Red Hat build of Quarkus 3.27.5.SP2
• CWE-1035

Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)

• Red Hat Build of Debezium 3.6
• Red Hat build of Quarkus 3.27.5.SP2
• CWE-1035

Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line

• Red Hat Build of Debezium 3.6
• Red Hat build of Quarkus 3.27.5.SP2
• CWE-1035

Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte

• Red Hat Build of Apache Camel 3.33.3.SP2
• Red Hat Build of Debezium 3.6
• CWE-1035

Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)

• Red Hat Build of Apache Camel 3.33.3.SP2
• Red Hat Build of Debezium 3.6
• CWE-1035

Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service

• Red Hat Build of Apache Camel 3.33.3.SP2
• Red Hat Build of Debezium 3.6
• CWE-1035

Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos

• Red Hat build of Apache Camel for Spring Boot 4
• Red Hat Fuse 7
• CWE-1035

Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size

• Red Hat Build of Debezium 3.6
• Red Hat build of Quarkus 3.27.5.SP2
• CWE-1035

Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos

• Red Hat build of Apache Camel for Spring Boot 4
• Red Hat Fuse 7
• CWE-1035

Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass

• Red Hat build of Apache Camel for Spring Boot 4
• CWE-1035

Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder

• Red Hat AMQ Broker 7
• Red Hat build of Apache Camel for Spring Boot 4
• CWE-1035

Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling

• Red Hat build of Apache Camel for Spring Boot 4
• Red Hat Fuse 7
• CWE-1035

Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated

• Red Hat build of Apache Camel for Spring Boot 4
• Red Hat Fuse 7
• CWE-1035