What is GHSA-9959-6p3m-wxpc?

GHSA-9959-6p3m-wxpc is a security advisory published by GitHub Security Advisories with Medium severity. Denial of service in Netty

Which CVE IDs does GHSA-9959-6p3m-wxpc cover?

GHSA-9959-6p3m-wxpc covers the following CVE IDs: CVE-2014-3488. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-9959-6p3m-wxpc?

GHSA-9959-6p3m-wxpc affects 1 product, including: maven/io.netty:netty-handler:\u003c 3.9.2.

GHSA-9959-6p3m-wxpcMedium

Denial of service in Netty

Vendor

GitHub Security Advisories

Published

June 30, 2020

Last Modified

January 9, 2023

🔗 CVE IDs covered (1)

CVE-2014-3488 →

📋 Description

The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.

🎯 Affected products1

maven/io.netty:netty-handler:< 3.9.2

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2014-3488
https://github.com/netty/netty/issues/2562
https://github.com/netty/netty/commit/2fa9400a59d0563a66908aba55c41e7285a04994
https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html
https://snyk.io/vuln/SNYK-JAVA-ORGJBOSSNETTY-31630
http://netty.io/news/2014/06/11/3-9-2-Final.html
http://secunia.com/advisories/59196
https://github.com/advisories/GHSA-9959-6p3m-wxpc