Search vulnerabilities

Results 2

Export CSV
CVE-2022-0084

xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
CVE-2020-14340

xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.