Lucene search
+L

13 matches found

OSV
OSV
•added 2022/08/27 12:00 a.m.•42 views

GHSA-76FG-MHRG-FMMG XNIO `notifyReadClosed` method logging message to unexpected end

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

7.5CVSS8.1AI score0.01484EPSS
SaveExploits0References6
NVD
NVD
•added 2022/08/26 6:15 p.m.•29 views

CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

7.5CVSS0.01484EPSS
SaveExploits0References4
Prion
Prion
•added 2022/08/26 6:15 p.m.•25 views

Design/Logic Flaw

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

5CVSS8.1AI score0.01484EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
•added 2022/08/26 6:15 p.m.•52 views

CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

7.5CVSS7AI score0.01484EPSS
SaveExploits0References2
CVE
CVE
•added 2022/08/26 5:25 p.m.•328 views

CVE-2022-0084

CVE-2022-0084 affects XNIO: the notifyReadClosed path logs to the opposite end, enabling an attacker to send malformed requests that may cause log contention or disk space exhaustion. Connected docs confirm this root cause and cite IBM/Red Hat advisories linking the CVE to XNIO, with remediation ...

7.5CVSS7.2AI score0.01484EPSS
SaveExploits0References4Affected Software4
Debian CVE
Debian CVE
•added 2022/08/26 5:25 p.m.•110 views

CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

7.5CVSS7.4AI score0.01484EPSS
SaveExploits0
Mend
Mend
•added 2022/08/26 5:25 p.m.•5 views

CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

8.7CVSS0.01484EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2022/08/26 5:25 p.m.•46 views

CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

8.5AI score0.01484EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/26 12:00 a.m.•5 views

CVE-2022-0084: Allocation of Resources Without Limits or Throttling

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

7.5CVSS7.1AI score0.01484EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/03/15 11:44 a.m.•119 views

CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

7.5CVSS2.8AI score0.01484EPSS
SaveExploits0References3
Prion
Prion
•added 2019/11/29 11:15 p.m.•24 views

Code injection

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

4.9CVSS5.3AI score0.0037EPSS
SaveExploits0References4Affected Software3
Xen Project
Xen Project
•added 2015/06/02 12:00 p.m.•105 views

Guest triggerable qemu MSI-X pass-through error messages

ISSUE DESCRIPTION Device model code dealing with guest PCI MSI-X interrupt management activities logs messages on certain supposedly invalid guest operations. IMPACT A buggy or malicious guest repeatedly invoking such operations may result in the host disk to fill up, possibly leading to a Denial...

4.9CVSS8AI score0.00478EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/01/12 1:54 p.m.•29 views

LogToServer action lets anyone log messages to the server log

Available without authentication. This can be used to hide breakin attempts or fill the disk if no log rotation is in place...

1.4AI score
SaveExploits0
Rows per page
Query Builder