Описание
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| netty | fixed | 1:4.0.37-1 | package | |
| netty | not-affected | jessie | package | |
| netty | not-affected | wheezy | package |
Примечания
Versions affected: Netty 4.0.0.Final - 4.0.36.Final and 4.1.0.Final
EPSS
Процентиль: 92%
0.0823
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
почти 9 лет назад
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
CVSS3: 3.7
redhat
больше 9 лет назад
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
CVSS3: 7.5
nvd
почти 9 лет назад
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
EPSS
Процентиль: 92%
0.0823
Низкий