~ / search / GHSA-7f88-5hhx-67m2

GHSA-7f88-5hhx-67m2

XNIO denial of service vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-5685

Packages

EcosystemPackageAffectedFixed in
Maven org.jboss.xnio:xnio-api < 3.8.14.Final 3.8.14.Final

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS). Version 3.8.14.Final is expected to contain a fix.

References

External links from the advisory. They lead to third-party sites.