Lucene search

K
fedoraFedoraFEDORA:850D92065311
HistoryMar 07, 2024 - 10:33 p.m.

[SECURITY] Fedora 40 Update: naga-3.0-26.20200930git6f1e95d.fc40

2024-03-0722:33:20
lists.fedoraproject.org
9
fedora
update
naga
nio library
java
sockets
serversocket
asynchronous
single thread
client
server
implementation
unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

15.5%

Naga aims to be a very small NIO library that provides a handful of java classes to wrap the usual Socket and ServerSocket with asynchronous NIO counterparts (similar to NIO2 planned for Java 1.7). All of this is driven from a single thread, making it useful for both client (e.g. allowing I/O to be done in the AWT-thread without any need for threads) and server programming (1 thread for all connections instead of 2 threads/connection). Internally Naga is a straightforward NIO implementation without any threads or event-queues thrown in, it is “just the NIO-stuff”, to let you build things on top of it. Naga contains the code needed to get NIO up and running without having to code partially read buffers and setting various selection key flags.

OSVersionArchitecturePackageVersionFilename
Fedora40anynaga< 3.0UNKNOWN

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

15.5%

Related for FEDORA:850D92065311