QwikSec

Security Database

CVE

CWE

Training

CVE-2020-14340

Published: Jun 2, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

Vendor	Product	Versions
n/a	XNIO	affected `xnio 3.7.9.Final, xnio 3.8.2.Final, xnio 3.9.0.Final`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=1860218

x_refsource_MISC

https://www.oracle.com/security-alerts/cpujan2022.html

x_refsource_MISC

https://www.oracle.com/security-alerts/cpuapr2022.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.