GHSA-rv63-gqm8-9w8qHighCVSS 7.5

Loop with Unreachable Exit Condition in Netty

Published
May 13, 2022
Last Modified
October 30, 2023

🔗 CVE IDs covered (1)

CVE-2016-4970 →

📋 Description

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).

🎯 Affected products2

  • maven/io.netty:netty-handler:>= 4.0.0.Alpha1, < 4.0.37.Final
  • maven/io.netty:netty-handler:>= 4.1.0.Beta1, < 4.1.1.Final

🔗 References (10)