CVE-2020-14340
Description
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
Risk Information
Base Score
5.9
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.33
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2020-14340 are fixed in JBoss-xnio-nio 3.8.2 | Windows |
| Vulnerabilities CVE-2020-14340 are fixed in JBoss-xnio-nio 3.7.9 | Windows |
| Multiple Vulnerabilities are affected in Red Hat JBoss Data Grid 7.0.0 | Windows |
| Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 5.0.0 | Windows |
| Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 6.0.0 | Windows |
| Vulnerabilities CVE-2020-14340 are affected in Red Hat JBoss Data Grid 6.0.0 | Windows |
| Vulnerabilities CVE-2020-14340 are fixed in JBoss-xnio-nio for Linux 3.8.2 | Linux |
| Vulnerabilities CVE-2020-14340 are fixed in JBoss-xnio-nio for Linux 3.7.9 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234