Red Hat JBoss Amq Clients vulnerabilities

2 CVEs affecting Red Hat JBoss Amq Clients, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-20445, published 2020-01-29.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-20445, published 2020-01-29. Critical severity, CVSS 9.1. EPSS: 13.8% chance of exploitation in the next 30 days. HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
• CVE-2019-20444, published 2020-01-29. Critical severity, CVSS 9.1. EPSS: 8.9% chance of exploitation in the next 30 days. HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an…