CVE-2020-14340

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

Score

CVSS 3.1 5.9 Medium

Status

Modified - secalert@redhat.com

Published

2021-06-02

Last modified

2024-08-04

Weaknesses

CWE-400

Affected products

• Communications Cloud Native Core Console (Oracle)
• Communications Cloud Native Core Network Repository Function (Oracle)
• Communications Cloud Native Core Policy (Oracle)
• Communications Cloud Native Core Security Edge Protection Proxy (Oracle)
• Communications Cloud Native Core Service Communication Proxy (Oracle)
• Communications Cloud Native Core Unified Data Repository (Oracle)
• Jboss Brms (Redhat)
• Jboss Data Grid (Redhat)
• Jboss Data Virtualization (Redhat)
• Jboss Enterprise Application Platform (Redhat)
• Jboss Fuse (Redhat)
• Jboss Operations Network (Redhat)
• Jboss Soa Platform (Redhat)
• Xnio (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1860218
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujan2022.html