GHSA-c738-77x8-wmq5
Uncontrolled Resource Consumption in XNIO
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jboss.xnio:xnio-nio | >= 3.8.0.Final, < 3.8.2.Final | 3.8.2.Final |
| Maven | org.jboss.xnio:xnio-nio | >= 3.6.0, < 3.7.9.Final | 3.7.9.Final |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
References
External links from the advisory. They lead to third-party sites.