Skip to content
Threat Feed

Tag

Desynchronization

1 brief RSS
high advisory

Netty HttpClientCodec Response Desynchronization Vulnerability

The Netty HttpClientCodec is vulnerable to response desynchronization when configured with HTTP/1.1 pipelining, HEAD requests, and the server sends 1xx responses, leading to a response body from one request being parsed as another and potentially unsafe socket reuse.

netty-codec-http +1 netty http desynchronization vulnerability
2r