as.leap:vertx-rpc (>=3.0.0 <=3.1.1), au.com.agiledigital:play-rest-support-testkit_2.11 (>=0.0.2 <=0.0.3) +2388 more potentially affected by CVE-2016-4970 via io.netty:netty-handler (>=4.0.0.Alpha1 <=4.0.36.Final)

io.netty:netty-handler MAVEN version =4.0.0.Alpha1, =3.0.0, =0.0.2, =2.1.1, =2.2.11, =2.2.11, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.4.15 and more Source cves: CVE-2016-4970 Source advisory: OSV:GHSA-RV63-GQM8-9W8Q...

Important: Red Hat Security Advisory: Red Hat Fuse 7.7.0 release and security update

A minor version update from 7.6 to 7.7 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

MGASA-2018-0485 Updated netty & jctools packages fix security vulnerability

handler/ssl/OpenSslEngine.java in Netty before 4.0.37.Final allows remote attackers to cause a denial of service infinite loop CVE-2016-4970...

Moderate: Red Hat Security Advisory: Red Hat JBoss Data Grid 7.1

Red Hat JBoss Data Grid 7.1 is now available for download from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2016-4970

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service infinite loop...

CVE-2016-4970

Netty CVE-2016-4970 affects OpenSslEngine in Netty 4.0.x prior to 4.0.37.Final and 4.1.x prior to 4.1.1.Final. The issue arises from improper handling of renegotiation, enabling remote attackers to cause a denial of service via an infinite loop. Remediation is to upgrade to Netty 4.0.37.Final or ...

CVE-2016-4970

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service infinite loop...