Netty CVEs | Waratek

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 102 matches · 97 in Waratek scope · 4 protected · 1 exploited · 1 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5

102matches 97in Waratek scope95.1% 4protected3.9% 1exploited1.0% 1CISA KEV1.0% 1public PoC1.0% 1EPSS ≥ 0.51.0%

Protected by Waratek 4 3.9% Rule in development 0 0.0% Mitigation candidate 1 1.0% No exploit published 92 90.2% Outside Waratek scope 5 4.9% Not applicable 0 0.0% Withdrawn CVE 0 0.0%

Critical 10 9.8% High 53 52.0% Medium 37 36.3% Low 2 2.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 4 3.9% partly blocked 0 0.0% not blocked 98 96.1% not established 0 0.0% unrecorded 0 0.0%

Exploited 1 1.0% Working exploit published 0 0.0% Proof of concept only 32 31.4% Forecast only 0 0.0% No public exploit 69 67.6%

split by StatusSeverityProtectionExploit maturity peak 69 / year

20142 No exploit published1 Outside Waratek scope1 Medium2 not blocked2 No public exploit2 20150 20160 20172 No exploit published2 High2 not blocked2 No public exploit2 20180 20191 No exploit published1 High1 not blocked1 No public exploit1 20204 No exploit published3 Outside Waratek scope1 Critical2 High2 not blocked4 No public exploit4 20216 Protected by Waratek2 No exploit published2 Outside Waratek scope2 High2 Medium4 blocked by ARMR today2 not blocked4 No public exploit6 20223 No exploit published3 High1 Medium2 not blocked3 Proof of concept only3 20233 Mitigation candidate1 No exploit published2 High2 Medium1 not blocked3 Exploited1 No public exploit2 20244 No exploit published4 Critical1 High1 Medium2 not blocked4 Proof of concept only2 No public exploit2 20258 Protected by Waratek1 No exploit published6 Outside Waratek scope1 High2 Medium5 Low1 blocked by ARMR today1 not blocked7 Proof of concept only5 No public exploit3 202669 Protected by Waratek1 No exploit published68 Critical7 High40 Medium21 Low1 blocked by ARMR today1 not blocked68 Proof of concept only22 No public exploit47

2014201620182020202220242026

102 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2014-3488	Medium	2014-07-31	Outside Waratek scope	No public exploit	The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
CVE-2014-0193	Medium	2014-05-06	No exploit published	No public exploit	WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2014-3488

Medium

2014-07-31

Outside Waratek scope

No public exploit

The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.

CVE-2014-0193

Medium

2014-05-06

No exploit published

No public exploit

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.