Oracle Communications Instant Messaging Server 8.1
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:communications_instant_messaging_server:8.1:*:*:*:*:*:*:*
part: a version: 8.1 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Communications Instant Messaging Server (204afd96-6da0-5425-8441-04878e944430) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43797 |
vulnerable | 2026-06-08 05:36:44.296162 |
HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
MEDIUM (6.5)
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to "sanitize" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself. Users should upgrade to version 4.1.71.Final.
Published: 2021-12-09T00:00:00.000Z
Updated: 2024-08-04T04:03:08.898Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37136 |
vulnerable | 2026-06-08 05:32:53.415449 |
Details available
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Published: 2021-10-19T00:00:00.000Z
Updated: 2024-08-04T01:16:02.944Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.