GHSA-76fg-mhrg-fmmg
XNIO `notifyReadClosed` method logging message to unexpected end
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jboss.xnio:xnio-all | <= 3.8.7.Final | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in XNIO, specifically in the `notifyReadClosed` method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up. A fix for this issue is available on the `3.x` branch of the repository.
References
External links from the advisory. They lead to third-party sites.