CVE-2023-5685: XNIO denial of service vulnerability
(updated )
A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS). Version 3.8.14.Final is expected to contain a fix.
References
- access.redhat.com/errata/RHSA-2023:7637
- access.redhat.com/errata/RHSA-2023:7638
- access.redhat.com/errata/RHSA-2023:7639
- access.redhat.com/errata/RHSA-2023:7641
- access.redhat.com/errata/RHSA-2024:10207
- access.redhat.com/errata/RHSA-2024:10208
- access.redhat.com/errata/RHSA-2024:2707
- access.redhat.com/security/cve/CVE-2023-5685
- bugzilla.redhat.com/show_bug.cgi?id=2241822
- github.com/advisories/GHSA-7f88-5hhx-67m2
- github.com/xnio/xnio
- github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java
- github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1
- issues.redhat.com/browse/XNIO-423
- nvd.nist.gov/vuln/detail/CVE-2023-5685
Code Behaviors & Features
Detect and mitigate CVE-2023-5685 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →