CVE-2020-14340
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD
Description
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
Affected (21)
Products: Redhat: Xnio, Jboss Brms, Jboss Data Grid, Jboss Data Virtualization, Jboss Enterprise Application Platform, Jboss Fuse, Jboss Operations Network, Jboss Soa Platform · Oracle: Communications Cloud Native Core Console, Communications Cloud Native Core Network Repository Function, Communications Cloud Native Core Policy, Communications Cloud Native Core Security Edge Protection Proxy, Communications Cloud Native Core Service Communication Proxy, Communications Cloud Native Core Unified Data Repository
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5 | |
| Version 6.0.0 | |
| Version 6.0.0 | |
| Version 5.0.0 | |
| Version 6.0.0 | |
| Version 3.0 | |
| Version 5 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.9.0 | |
| Version 1.14.0 | |
| Version 1.14.0 | |
| Version 1.15.0 | |
| Version 1.14.0 | |
| Version 1.14.0 |
References (6)
Source: secalert@redhat.com
Issue TrackingVendor Advisory
Source: secalert@redhat.com
PatchThird Party Advisory
Source: secalert@redhat.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Timeline
No history available yet.