| Package | Affected versions | Patched versions |
|---|---|---|
| io.netty:netty-handler | < 3.9.2 | 3.9.2 |
| netty | = 3.6.0= 3.6.1= 3.6.2= 3.6.3= 3.6.4= 3.6.5= 3.6.6= 3.6.7= 3.6.8= 3.7.0= 3.8.0= 3.8.1= 3.9.0= 3.9.1≤ 3.9.1.1 |
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free