CVE-2016-4970

7.5 HIGH

Published: April 13, 2017 Modified: May 13, 2026

Description

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://netty.io/news/2016/06/07/4-0-37-Final.html

Source: secalert@redhat.com

Release Notes Vendor Advisory

http://netty.io/news/2016/06/07/4-1-1-Final.html

Source: secalert@redhat.com

Release Notes Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2017-0179.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-1097.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/96540

Source: secalert@redhat.com

Third Party Advisory VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1343616

Source: secalert@redhat.com

Issue Tracking Third Party Advisory VDB Entry

https://github.com/netty/netty/pull/5364

Source: secalert@redhat.com

Patch Third Party Advisory

https://lists.apache.org/thread.html/afaa5860e3a6d327eb96c3d82cbd2f5996de815a16854ed1ad310144%40%3Ccommits.cassandra.apache.org%3E

Source: secalert@redhat.com

https://wiki.opendaylight.org/view/Security_Advisories

Source: secalert@redhat.com

Third Party Advisory

http://netty.io/news/2016/06/07/4-0-37-Final.html