CVE-2014-3488

Published: 31 July 2014

The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.

Priority

Status

Package	Release	Status
netty Launchpad, Ubuntu, Debian	lucid	Not vulnerable
	precise	Not vulnerable
	saucy	Not vulnerable
	trusty	Not vulnerable
	upstream	Released (3.9.2.Final)
	utopic	Not vulnerable

Notes

Author	Note
seth-arnold	only 3.9.x branch affected

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3488
https://bugzilla.redhat.com/show_bug.cgi?id=1107983
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›