GHSA-c738-77x8-wmq5MediumCVSS 5.9

Uncontrolled Resource Consumption in XNIO

Published
June 8, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

📋 Description

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

🎯 Affected products2

  • maven/org.jboss.xnio:xnio-nio:>= 3.8.0.Final, <= 3.8.1.Final
  • maven/org.jboss.xnio:xnio-nio:>= 3.6.0, <= 3.7.8.Final

🔗 References (5)