GitHub Advisoryadvisory · Maven

GHSA-7f88-5hhx-67m2 XNIO denial of service vulnerability

HIGH Published 2024-03-22 Modified 2024-11-26 Official page ↗

Aliases: CVE-2023-5685
Ecosystem: Maven
Packages: org.jboss.xnio:xnio-api
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-400
Reviewed: 2024-03-24

Affected packages

• Maven org.jboss.xnio:xnio-api: < 3.8.14.Final → fixed in 3.8.14.Final

Description

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS). Version 3.8.14.Final is expected to contain a fix.

Alias · CVE (1)

CVE-2023-5685 A flaw was found in XNIO. vulnerability

Weakness · CWE (1)

CWE-400 Uncontrolled Resource Consumption weakness

References