En resumen
- CVE-2014-3488 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a io.netty:netty-handler, netty (netty).
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.2%, mayor que el 91.0% de las vulnerabilidades.
- Solución: actualizar a 3.9.2 o posterior.
| Package | Affected versions | Patched versions |
|---|
| io.netty:netty-handler Maven | < 3.9.2
| 3.9.2
|
| netty | = 3.6.0= 3.6.1= 3.6.2= 3.6.3= 3.6.4= 3.6.5= 3.6.6= 3.6.7= 3.6.8= 3.7.0= 3.8.0= 3.8.1= 3.9.0= 3.9.1≤ 3.9.1.1
| No fix yet |
Description
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
NVD description
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
Más vulnerabilidades de io.netty:netty-handler
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free