CVE-2021-21290
MediumAdvisory
Published 8 Feb 2021In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.2
- base score, highest
- EPSS
- 0.018
- 77th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 151
- of 17,781 indexed, latest versions
- Container images
- 162
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
Carried by container images the latest versions of 151 of 17,781 indexed charts deploy, on 162 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| netty-codec-httpmaven | 4.0.27.Final, 4.0.52.Final, 4.1.12.Final, 4.1.13.Final+21 more | 4.1.59.Final | 113 |
| nettymaven | 3.2.10.Final, 3.6.1.Final, 3.6.2.Final, 3.6.6.Final+6 more | no fix listed | 66 |
- OSV records
- GHSA-5mcr-gq6c-3hq2
Charts affected
151 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opendistro-eswitcom-gmbh | 1.13.3 | 1 of 3See more | 5,806 |
Container images carrying it
162 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ibmcom/ | 58548034cf55 | netty | no fix listed | 1 |
| krontechnology/ | 7feef7d2ab42 | netty-codec-http | 4.1.59.Final | 1 |
| library/ | cb079c0d7a57 | netty | no fix listed | 1 |
| library/ | 41ed3a1a16b6 | netty | no fix listed | 1 |
| library/ | 1fe4fb22a2a5 | netty-codec-http | 4.1.59.Final | 1 |
| library/ | a1ba477fa412 | netty | no fix listed | 1 |
| library/ | 0ae5169e3d0f | netty-codec-http | 4.1.59.Final | 1 |
| library/ | 7e43ff493a47 | netty-codec-http | 4.1.59.Final | 1 |
| library/ | 88cd63154d4b | netty-codec-http | 4.1.59.Final | 1 |
| library/ | a246bc64207e | netty-codec-http | 4.1.59.Final | 1 |
| library/ | a9bc5a3a1fc3 | netty-codec-http | 4.1.59.Final | 1 |
| library/ | bd5d420506d6 | netty | no fix listed | 1 |
| library/ | 3882d9493d38 | netty | no fix listed | 1 |
| lightbend/ | 0bedf37f428a | netty | no fix listed | 1 |
| lourdesmorente/ | 608745878cdb | netty-codec-http | 4.1.59.Final | 1 |
| metabase/ | ffb2dccacefc | netty-codec-http | 4.1.59.Final | 1 |
| molynx/ | 441c9f52f092 | netty-codec-http | 4.1.59.Final | 1 |
| muluder/ | 43b597a93da7 | netty | no fix listed | 1 |
| nacos/ | fe6e5688cdf3 | netty-codec-http | 4.1.59.Final | 1 |
| omecproject/ | 28a90cc26716 | netty | no fix listed | 1 |
| omecproject/ | b4ae7d0d6b74 | netty-codec-http | 4.1.59.Final | 1 |
| omecproject/ | 5715e5648aa0 | netty | no fix listed | 1 |
| onosproject/ | 44914a8d4b3f | netty netty-codec-http | no fix listed 4.1.59.Final | 1 |
| openwhisk/ | f5831ec85525 | netty netty-codec-http | no fix listed 4.1.59.Final | 1 |
| openzipkin/ | 60c3970df479 | netty-codec-http | 4.1.59.Final | 1 |
| openzipkin/ | b5d51d1144e2 | netty-codec-http | 4.1.59.Final | 1 |
| oscarsotosanchez/ | 730c00a099b8 | netty-codec-http | 4.1.59.Final | 1 |
| pcarrascoponce/ | 981fc482442c | netty-codec-http | 4.1.59.Final | 1 |
| platform9community/ | de3fa9b70df1 | netty-codec-http | 4.1.59.Final | 1 |
| platform9community/ | 40a4970de568 | netty-codec-http | 4.1.59.Final | 1 |
| radarbase/ | 1d2af7dd5a4e | netty | no fix listed | 1 |
| raykrueger/ | c8baf3de57bb | netty | no fix listed | 1 |
| richardchesterwood/ | 518f946b9f05 | netty-codec-http | 4.1.59.Final | 1 |
| salaboy/ | f225568e6d03 | netty-codec-http | 4.1.59.Final | 1 |
| scorpiobroker/ | db55012043df | netty-codec-http | 4.1.59.Final | 1 |
| seldonio/ | ba81b17f00eb | netty-codec-http | 4.1.59.Final | 1 |
| seldonio/ | eea0d3f578ca | netty-codec-http | 4.1.59.Final | 1 |
| slagattollas/ | cecd95e31486 | netty-codec-http | 4.1.59.Final | 1 |
| slagattollas/ | dc63973dae0d | netty-codec-http | 4.1.59.Final | 1 |
| slamdev/ | b4b029c9b15f | netty netty-codec-http | no fix listed 4.1.59.Final | 1 |
| snappydatainc/ | fd4b2070466f | netty | no fix listed | 1 |
| snowplow/ | 41d318841516 | netty-codec-http | 4.1.59.Final | 1 |
| sslhep/ | 9e80af083079 | netty netty-codec-http | no fix listed 4.1.59.Final | 1 |
| thmmniii/ | 86105349c1a3 | netty-codec-http | 4.1.59.Final | 1 |
| torrespro/ | 6d3bd305a1ba | netty-codec-http | 4.1.59.Final | 1 |
| trinodb/ | 38c6f24ab1a4 | netty | no fix listed | 1 |
| trinodb/ | ee80ab5eeab2 | netty | no fix listed | 1 |
| voltha/ | e038acb950d3 | netty netty-codec-http | no fix listed 4.1.59.Final | 1 |
| vromero/ | 408d6a46b153 | netty-codec-http | 4.1.59.Final | 1 |
| wavefronthq/ | d1064d28f6eb | netty-codec-http | 4.1.59.Final | 1 |