GHSA-7f88-5hhx-67m2
Suggest an improvement- Source
- https://github.com/advisories/GHSA-7f88-5hhx-67m2
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-7f88-5hhx-67m2/GHSA-7f88-5hhx-67m2.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-7f88-5hhx-67m2
- Aliases
- Published
- 2024-03-22T21:30:56Z
- Modified
- 2024-05-08T10:02:03.870034Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- XNIO denial of service vulnerability
- Details
-
A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS). Version 3.8.14.Final is expected to contain a fix.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2023-5685
- https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1
- https://access.redhat.com/errata/RHSA-2023:7637
- https://access.redhat.com/errata/RHSA-2023:7638
- https://access.redhat.com/errata/RHSA-2023:7639
- https://access.redhat.com/errata/RHSA-2023:7641
- https://access.redhat.com/errata/RHSA-2024:2707
- https://access.redhat.com/security/cve/CVE-2023-5685
- https://bugzilla.redhat.com/show_bug.cgi?id=2241822
- https://github.com/xnio/xnio
- https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249
- https://issues.redhat.com/browse/XNIO-423
Affected packages
Maven / org.jboss.xnio:xnio-api
Package
- Name
- org.jboss.xnio:xnio-api
- View open source insights on deps.dev
- Purl
- pkg:maven/org.jboss.xnio/xnio-api
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.8.14.Final
Affected versions
2.*
2.0.0.CR2
2.0.0.CR3
2.0.0.CR4
2.0.0.GA
2.0.1.GA
2.0.2.GA
2.1.0.CR1
2.1.0.CR2
3.*
3.0.0.Beta1
3.0.0.Beta2
3.0.0.Beta3
3.0.0.Beta4
3.0.0.Beta5
3.0.0.Beta6
3.0.0.Beta7
3.0.0.Beta8
3.0.0.Beta9
3.0.0.CR1
3.0.0.CR2
3.0.0.CR3
3.0.0.CR4
3.0.0.CR5
3.0.0.CR5-frainone-1
3.0.0.CR6
3.0.0.CR7
3.0.0.GA
3.0.1.GA
3.0.2.GA
3.0.3.GA
3.0.4.GA
3.0.5.GA
3.0.6.GA
3.0.7.GA
3.0.8.GA
3.0.9.GA
3.0.10.GA
3.0.11.GA
3.0.12.GA
3.0.13.GA
3.0.14.GA
3.0.15.GA
3.0.16.GA
3.0.17.GA
3.1.0.Beta1
3.1.0.Beta2
3.1.0.Beta3
3.1.0.Beta4
3.1.0.Beta5
3.1.0.Beta6
3.1.0.Beta7
3.1.0.Beta8
3.1.0.Beta9
3.1.0.CR1
3.1.0.CR2
3.1.0.CR3
3.1.0.CR4
3.1.0.CR5
3.1.0.CR6
3.1.0.CR7
3.1.0.Final
3.2.0.Beta1
3.2.0.Beta2
3.2.0.Beta3
3.2.0.Beta4
3.2.0.Final
3.2.1.Final
3.2.2.Final
3.2.3.Final
3.3.0.Beta1
3.3.0.Beta2
3.3.0.Beta3
3.3.0.Beta4
3.3.0.Beta5
3.3.0.Final
3.3.1.Final
3.3.2.Final
3.3.3.Final
3.3.4.Final
3.3.5.Final
3.3.6.Final
3.3.7.Final
3.3.8.Final
3.4.0.Beta1
3.4.0.Beta2
3.4.0.Beta3
3.4.0.Final
3.4.1.Final
3.4.2.Final
3.4.3.Final
3.4.4.Final
3.4.5.Final
3.4.6.Final
3.4.7.Final
3.5.0.Beta1
3.5.0.Beta2
3.5.0.Beta3
3.5.0.Beta4
3.5.0.Beta5
3.5.0.Beta6
3.5.0.Beta7
3.5.0.CR1
3.5.0.CR2
3.5.0.Final
3.5.1.Final
3.5.2.Final
3.5.3.Final
3.5.4.Final
3.5.5.Final
3.5.6.Final
3.5.7.Final
3.5.8.Final
3.5.9.Final
3.6.0.Beta1
3.6.0.Beta2
3.6.0.Final
3.6.1.Final
3.6.2.Final
3.6.3.Final
3.6.4.Final
3.6.5.Final
3.6.6.Final
3.6.7.Final
3.6.8.Final
3.6.9.Final
3.7.0.Final
3.7.1.Final
3.7.2.Final
3.7.3.Final
3.7.4.Final
3.7.5.Final
3.7.6.Final
3.7.7.Final
3.7.8.Final
3.7.9.Final
3.7.10.Final
3.7.11.Final
3.7.12.Final
3.8.0.Final
3.8.1.Final
3.8.2.Final
3.8.4.Final
3.8.5.Final
3.8.6.Final
3.8.7.Final
3.8.8.Final
3.8.9.Final
3.8.10.Final
3.8.11.Final
3.8.12.Final
3.8.13.Final