Skip to content
Threat Feed
Subscribe

Product

Netty (4.2.11.Final Through 4.2.17.Final)

1 brief RSS
high advisory

Hostname Verification Bypass in Netty QUIC Certificate Validation

Netty versions 4.2.11.Final through 4.2.17.Final contain an incomplete hostname verification fix in the QUIC certificate verification path, allowing network-adjacent attackers to bypass certificate validation and conduct man-in-the-middle attacks.

Netty
1t 1c