medium5.9
CVE-2020-14340
Uncontrolled Resource Consumption in XNIO
Impact
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jboss.xnio:xnio-nio | >= 3.8.0.Final, <= 3.8.1.Final | 3.8.2.Final |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Xnio | from 3.6.1 before 3.7.9 from 3.8.0 before 3.8.2 Version 3.6.0 |
| Redhat | Jboss Brms | Versions 5, 6 |
| Redhat | Jboss Data Grid | Versions 6.0.0, 7.0.0 |
| Redhat | Jboss Data Virtualization | Version 6.0.0 |
| Redhat | Jboss Enterprise Application Platform | Versions 5.0.0, 6.0.0 |
| Redhat | Jboss Fuse | Versions 6.0.0, 7.0.0 |
| Redhat | Jboss Operations Network | Version 3.0 |
| Redhat | Jboss Soa Platform | Version 5 |
| Oracle | Communications Cloud Native Core Console | Version 1.9.0 |
| Oracle | Communications Cloud Native Core Network Repository Function | Version 1.14.0 |
| Oracle | Communications Cloud Native Core Policy | Version 1.14.0 |
| Oracle | Communications Cloud Native Core Security Edge Protection Proxy | Version 1.15.0 |