CVE-2022-0084: Allocation of Resources Without Limits or Throttling

August 27, 2022 (updated September 2, 2022)

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

References

access.redhat.com/security/cve/CVE-2022-0084
bugzilla.redhat.com/show_bug.cgi?id=2064226
github.com/advisories/GHSA-76fg-mhrg-fmmg
github.com/xnio/xnio/commit/fdefb3b8b715d33387cadc4d48991fb1989b0c12
github.com/xnio/xnio/pull/291
nvd.nist.gov/vuln/detail/CVE-2022-0084

Code Behaviors & Features

Detect and mitigate CVE-2022-0084 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →