Lucene search

[email protected]NVD:CVE-2020-14340

HistoryJun 02, 2021 - 1:15 p.m.

CVE-2020-14340

2021-06-0213:15:08

CWE-400

[email protected]

web.nvd.nist.gov

xnio

file descriptor

denial of service

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.8%

JSON

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

Affected configurations

Nvd

Node

redhatxnioRange3.6.1–3.7.9

redhatxnioRange3.8.0–3.8.2

redhatxnioMatch3.6.0beta1

redhatxnioMatch3.6.0beta2

Node

redhatjboss_brmsMatch5

redhatjboss_brmsMatch6

redhatjboss_data_gridMatch6.0.0

redhatjboss_data_gridMatch7.0.0

redhatjboss_data_virtualizationMatch6.0.0-

redhatjboss_enterprise_application_platformMatch5.0.0

redhatjboss_enterprise_application_platformMatch6.0.0

redhatjboss_fuseMatch6.0.0

redhatjboss_fuseMatch7.0.0

redhatjboss_operations_networkMatch3.0

redhatjboss_soa_platformMatch5

Node

oraclecommunications_cloud_native_core_consoleMatch1.9.0

oraclecommunications_cloud_native_core_network_repository_functionMatch1.14.0

oraclecommunications_cloud_native_core_policyMatch1.14.0

oraclecommunications_cloud_native_core_security_edge_protection_proxyMatch1.15.0

oraclecommunications_cloud_native_core_service_communication_proxyMatch1.14.0

oraclecommunications_cloud_native_core_unified_data_repositoryMatch1.14.0

VendorProductVersionCPE
redhatxnio*cpe:2.3:a:redhat:xnio:*:*:*:*:*:*:*:*
redhatxnio3.6.0cpe:2.3:a:redhat:xnio:3.6.0:beta1:*:*:*:*:*:*
redhatxnio3.6.0cpe:2.3:a:redhat:xnio:3.6.0:beta2:*:*:*:*:*:*
redhatjboss_brms5cpe:2.3:a:redhat:jboss_brms:5:*:*:*:*:*:*:*
redhatjboss_brms6cpe:2.3:a:redhat:jboss_brms:6:*:*:*:*:*:*:*
redhatjboss_data_grid6.0.0cpe:2.3:a:redhat:jboss_data_grid:6.0.0:*:*:*:*:*:*:*
redhatjboss_data_grid7.0.0cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*
redhatjboss_data_virtualization6.0.0cpe:2.3:a:redhat:jboss_data_virtualization:6.0.0:-:*:*:*:*:*:*
redhatjboss_enterprise_application_platform5.0.0cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*
redhatjboss_enterprise_application_platform6.0.0cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	xnio	*	cpe:2.3:a:redhat:xnio::::::::
redhat	xnio	3.6.0	cpe:2.3:a:redhat:xnio:3.6.0:beta1::::::
redhat	xnio	3.6.0	cpe:2.3:a:redhat:xnio:3.6.0:beta2::::::
redhat	jboss_brms	5	cpe:2.3:a:redhat:jboss_brms:5:::::::*
redhat	jboss_brms	6	cpe:2.3:a:redhat:jboss_brms:6:::::::*
redhat	jboss_data_grid	6.0.0	cpe:2.3:a:redhat:jboss_data_grid:6.0.0:::::::*
redhat	jboss_data_grid	7.0.0	cpe:2.3:a:redhat:jboss_data_grid:7.0.0:::::::*
redhat	jboss_data_virtualization	6.0.0	cpe:2.3:a:redhat:jboss_data_virtualization:6.0.0:-::::::
redhat	jboss_enterprise_application_platform	5.0.0	cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:::::::*
redhat	jboss_enterprise_application_platform	6.0.0	cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:::::::*