NetSight
IP …
high7.5

CVE-2016-4970

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite l…

Impact

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).

Affected products

VendorProductAffected versions
NettyNetty
from 4.0.20 before 4.0.37
from 4.1.0 before 4.1.1
RedhatJboss Data Grid
Version 7.1
RedhatJboss Middleware Text-Only Advisories
Version 1.0
ApacheCassandra
Version 3.11.4

Weakness classification

CWE-835

References