This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-14340 →

DEBIAN-CVE-2020-14340

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cy...

Original description

The description as published by the source.

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 jboss-xnio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-1"}]}]

Debian:13 jboss-xnio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-1"}]}]

Debian:14 jboss-xnio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-1"}]}]

References

advisory security-tracker.debian.org