FKIE_CVE-2014-3488
Vulnerability from fkie_nvd - Published: 2014-07-31 14:55 - Updated: 2025-04-12 10:46
Severity ?
Summary
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C25A1DCE-E327-4BB4-9689-FCFEC8D605EA",
"versionEndIncluding": "3.9.1.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F3EEBC0F-815E-4F66-B9B4-1256AAAB03A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "140919D1-2868-4F11-8421-5CA35A3FFCA0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "28C7EA90-B934-438B-9705-5B53B0F3D09C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "6C1DCF99-CBB1-4FD2-B073-B91A2DD27290",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "E4EA1D52-61D5-4448-BA64-0D9A8FFFE173",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "2CFB08C8-9021-4C26-B8B8-A2C07EB4BB83",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.6:*:*:*:*:*:*:*",
"matchCriteriaId": "C3707350-D658-485E-A136-04AF3ED7AF4E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "8D4831E7-1F30-4AEA-82D8-E703701DC8B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.6.8:*:*:*:*:*:*:*",
"matchCriteriaId": "7CE508BE-00C4-4304-BA92-063129C2B6E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3876968E-7B85-4149-BF6B-488D32A7B2B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2C365439-029C-4F5F-ADB2-0153DD4965B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "CAECE2B6-DD9F-4FEC-B15F-EA99BF716390",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9879F5B0-DF82-470F-A028-1B69BFB67FB9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netty:netty:3.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "32DFF597-4F5A-44E1-BB82-F5DF7942F6AC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message."
},
{
"lang": "es",
"value": "SslHandler en Netty anterior a 3.9.2 permite a atacantes remotos causar una denegaci\u00f3n de servicio (bucle infinito y consumo de CPU) a trav\u00e9s de un mensaje SSLv2Hello manipulado."
}
],
"id": "CVE-2014-3488",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2014-07-31T14:55:02.910",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://netty.io/news/2014/06/11/3-9-2-Final.html"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/59196"
},
{
"source": "secalert@redhat.com",
"url": "https://github.com/netty/netty/commit/2fa9400a59d0563a66908aba55c41e7285a04994"
},
{
"source": "secalert@redhat.com",
"tags": [
"Exploit",
"Patch"
],
"url": "https://github.com/netty/netty/issues/2562"
},
{
"source": "secalert@redhat.com",
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://netty.io/news/2014/06/11/3-9-2-Final.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/59196"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://github.com/netty/netty/commit/2fa9400a59d0563a66908aba55c41e7285a04994"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Patch"
],
"url": "https://github.com/netty/netty/issues/2562"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…