Cloudanix VulnDB

CVE-2016-4970

High · 7.5

CVSS

7.5

EPSS

11.3%

Published

Apr 13, 2017

CISA due date

—

The record

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).

Affected packages

Ecosystem Package Introduced Fixed
Maven io.netty:netty-handler 4.0.0.Alpha1 4.0.37.Final
Maven io.netty:netty-handler 4.1.0.Beta1 4.1.1.Final
Debian:11 netty 0 1:4.0.37-1
Debian:12 netty 0 1:4.0.37-1
Debian:13 netty 0 1:4.0.37-1
Debian:14 netty 0 1:4.0.37-1
Mageia:6 jctools 0 1.2.1-1.mga6
Mageia:6 netty 0 4.0.42-1.mga6
Ubuntu:Pro:16.04:LTS netty 0 No fix
maven io.netty/netty-handler 4.0-alpha0 No fix
maven io.netty/netty-handler 4.1-alpha0 No fix

Related vulnerabilities