PT-2017-8631 · Netty+1 · Netty+1

Scottmitch · Publicado 2017-04-13 · Atualizado 2022-05-13 · CVE-2016-4970

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Netty versions 4.0.x through 4.0.36.Final Netty versions 4.1.x through 4.1.0.Final

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This is due to a loop with an unreachable exit condition.

Recommendations For Netty versions 4.0.x through 4.0.36.Final, update to version 4.0.37.Final or later. For Netty versions 4.1.x through 4.1.0.Final, update to version 4.1.1.Final or later.

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CVE-2016-4970

GHSA-RV63-GQM8-9W8Q

MGASA-2018-0485

Produtos afetados

Apache Cassandra

Netty

Referências · 23

• https://github.com/netty/netty · Nota
• https://github.com/netty/netty/pull/5364 · Correção
• http://netty.io/news/2016/06/07/4-1-1-Final.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-4970 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1343616 · Nota
• https://lists.apache.org/thread.html/afaa5860e3a6d327eb96c3d82cbd2f5996de815a16854ed1ad310144%40%3Ccommits.cassandra.apache.org%3E · Nota
• http://rhn.redhat.com/errata/RHSA-2017-0179.html · Aviso do Fabricante
• http://netty.io/news/2016/06/07/4-0-37-Final.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4970 · Nota de Segurança
• https://t.me/cvenotify/9702 · Publicação no Telegram
• https://bugs.mageia.org/show_bug.cgi?id=23974 · Nota
• http://rhn.redhat.com/errata/RHSA-2017-1097.html · Aviso do Fabricante
• http://securityfocus.com/bid/96540 · Nota
• https://osv.dev/vulnerability/GHSA-rv63-gqm8-9w8q · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2018-0485.html · Nota de Segurança