| Package | Affected versions | Patched versions |
|---|---|---|
| io.netty:netty-handler | ≥ 4.0.0.Alpha1, < 4.0.37.Final≥ 4.1.0.Beta1, < 4.1.1.Final | 4.0.37.Final4.1.1.Final |
| cassandra | = 3.11.4 | |
| netty | ≥ 4.0.20, < 4.0.37≥ 4.1.0, < 4.1.1 | 4.0.374.1.1 |
| jboss data grid | = 7.1 | |
| jboss middleware text-only advisories | = 1.0 |
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free