Loop with Unreachable Exit Condition in Netty
RSS Feed
HIGH
GHSA-rv63-gqm8-9w8q
CVE-2016-4970
Description:
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
Affected Packages
| Ecosystem | Package | Vulnerable Versions | Patched Version |
|---|---|---|---|
| maven |
io.netty:netty-handler
|
>= 4.1.0.Beta1, < 4.1.1.Final>= 4.0.0.Alpha1, < 4.0.37.Final |
4.1.1.Final
|
Actions
Advisory Details
| Published: | May 13, 2022 about 4 years ago |
| Updated: | July 23, 2026 9 days ago |
| CVSS Score: | 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| EPSS: | 11.26% 96th percentile |
| Source: | Github |
| Classification: | GENERAL |
| UUID: | GSA_kwCzR0hTQS1ydjYzLWdxbTgtOXc4cc3yvg |
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-4970
- https://github.com/netty/netty/pull/5364
- https://bugzilla.redhat.com/show_bug.cgi?id=1343616
- https://lists.apache.org/thread.html/afaa5860e3a6d327eb96c3d82cbd2f5996de815a16854ed1ad310144@%3Ccommits.cassandra.apache.org%3E
- https://wiki.opendaylight.org/view/Security_Advisories
- http://netty.io/news/2016/06/07/4-0-37-Final.html
- http://netty.io/news/2016/06/07/4-1-1-Final.html
- http://rhn.redhat.com/errata/RHSA-2017-0179.html
- http://rhn.redhat.com/errata/RHSA-2017-1097.html
- https://github.com/advisories/GHSA-rv63-gqm8-9w8q