Redhat Xnio vulnerabilities

2 vulnerabilities

Known vulnerabilities in Redhat Xnio, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2020-14340debianjboss-xnio+16
EPSS score
2.21%
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.7.5CVE-2022-0084debianjboss-xnio+6
EPSS score
1.48%
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.