CVE-2026-59919— Netty HAProxy V1协议AF_UNIX地址CRLF注入漏洞
可能的 ATT&CK 技术 1AI
T1557.002 · ARP Cache Poisoning获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-59919 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
来源: CVE Program / CVE List V5
Vulnerability Description
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder ( HAProxyMessageEncoder ) writes AF_UNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF characters, so an attacker who controls an AF_UNIX address can inject \r\n sequences and split the single PROXY header into multiple lines. This is possible because the V1 protocol uses CRLF as its line terminator and, unlike IPv4/IPv6 addresses whose format checks implicitly reject CRLF, AF_UNIX addresses are only validated for length (up to 108 bytes), allowing a forged second PROXY header line that spoofs the client source/destination IP to a downstream server or load balancer. The issue is fixed in versions 4.1.136.Final and 4.2.16.Final.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
对CRLF序列的转义处理不恰当(CRLF注入)
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-59919 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-59919 的情报信息
请登录查看更多情报信息。
CVE-2026-59919 厂商安全公告 (1)
同批安全公告 · netty · 2026-07-29 · 共 6 条
| CVE-2026-59901 | 8.7 HIGH | Netty Bzip2Decoder 无限循环导致事件循环线程挂起漏洞 |
| CVE-2026-59899 | 6.9 MEDIUM | Netty HTTP/1.1 流水线连接队列无限增长导致拒绝服务漏洞 |
| CVE-2026-59900 | 6.9 MEDIUM | Netty codec-http2 HTTP/2转HTTP/1.x缺少Host头去重导致请求路由绕过漏洞 |
| CVE-2026-59920 | 6.5 MEDIUM | Netty STOMP连接帧头注入漏洞 |
| CVE-2026-59898 | 6.3 MEDIUM | Netty WebSockets V07/V08握手缺少连接/升级验证漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-59919
暂无评论