Back to Database
Status published
Medium
CVE-2014-3488
The SslHandler in Netty before 3.9.2 allows remote attackers to...
Vulnerability Description
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-3488
Credits & Attribution
No credits recorded in the NVD database.
References
More from netty
View All →CVE-2025-67735
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
Medium
6.5
CVE-2025-59419
Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery
Medium
5.5
CVE-2025-58057
Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack
Medium
6.9
CVE-2025-58056
Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
Low
2.9
CVE-2025-55163
Netty MadeYouReset HTTP/2 DDoS Vulnerability
High
8.2
Affected Vendor
netty
View all reports →Affected Software
netty
Vulnerable Versions:
0, 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 3.7.0, 3.8.0, 3.8.1, 3.9.0, 3.9.1
Timeline
Official Publish:
July 31st, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.