GitHub Advisoryadvisory · Maven

GHSA-9959-6p3m-wxpc Denial of service in Netty

MEDIUM Published 2020-06-30 Modified 2021-09-22 Official page ↗
Aliases
CVE-2014-3488
Ecosystem
Maven
Packages
io.netty:netty-handler
Severity
Moderate
Weaknesses
CWE-119
Reviewed
2020-06-30

Affected packages

• Maven io.netty:netty-handler: < 3.9.2 → fixed in 3.9.2

Description

The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.

Related

Alias · CVE (1)

  • CVE-2014-3488 The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted… vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References