CVE-2020-14340

Source
https://cve.org/CVERecord?id=CVE-2020-14340
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14340.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-14340
Aliases
Downstream
Published
2021-06-02T13:15:08.083Z
Modified
2026-07-08T05:56:02.558997143Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

Database specific
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.9.0"
                },
                {
                    "last_affected": "1.9.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_console"
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.14.0"
                },
                {
                    "last_affected": "1.14.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.14.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_network_repository_function"
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.14.0"
                },
                {
                    "last_affected": "1.14.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_policy"
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.15.0"
                },
                {
                    "last_affected": "1.15.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.15.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_security_edge_protection_proxy"
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.14.0"
                },
                {
                    "last_affected": "1.14.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.14.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_service_communication_proxy"
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.14.0"
                },
                {
                    "last_affected": "1.14.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.14.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_unified_data_repository"
        },
        {
            "extracted_events": [
                {
                    "introduced": "5"
                },
                {
                    "last_affected": "5"
                },
                {
                    "introduced": "6"
                },
                {
                    "last_affected": "6"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:jboss_brms:5:*:*:*:*:*:*:*",
                "cpe:2.3:a:redhat:jboss_brms:6:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:jboss_brms"
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0.0"
                },
                {
                    "last_affected": "6.0.0"
                },
                {
                    "introduced": "7.0.0"
                },
                {
                    "last_affected": "7.0.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:jboss_data_grid:6.0.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:jboss_data_grid"
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0.0-NA"
                },
                {
                    "last_affected": "6.0.0-NA"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:jboss_data_virtualization:6.0.0:-:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:jboss_data_virtualization"
        },
        {
            "extracted_events": [
                {
                    "introduced": "5.0.0"
                },
                {
                    "last_affected": "5.0.0"
                },
                {
                    "introduced": "6.0.0"
                },
                {
                    "last_affected": "6.0.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:jboss_enterprise_application_platform"
        },
        {
            "extracted_events": [
                {
                    "introduced": "6.0.0"
                },
                {
                    "last_affected": "6.0.0"
                },
                {
                    "introduced": "7.0.0"
                },
                {
                    "last_affected": "7.0.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:jboss_fuse:6.0.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:jboss_fuse"
        },
        {
            "extracted_events": [
                {
                    "introduced": "3.0"
                },
                {
                    "last_affected": "3.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:jboss_operations_network:3.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:jboss_operations_network"
        },
        {
            "extracted_events": [
                {
                    "introduced": "5"
                },
                {
                    "last_affected": "5"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:jboss_soa_platform:5:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:jboss_soa_platform"
        }
    ]
}
References

Affected packages

Git / github.com/xnio/xnio

Affected ranges

Type
GIT
Repo
https://github.com/xnio/xnio
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:redhat:xnio:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:redhat:xnio:3.6.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:redhat:xnio:3.6.0:beta2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "3.6.1"
        },
        {
            "fixed": "3.7.9"
        },
        {
            "introduced": "3.8.0"
        },
        {
            "fixed": "3.8.2"
        },
        {
            "introduced": "3.6.0-beta1"
        },
        {
            "last_affected": "3.6.0-beta1"
        },
        {
            "introduced": "3.6.0-beta2"
        },
        {
            "last_affected": "3.6.0-beta2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

3.*
3.6.0-beta1
3.6.0-beta2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14340.json"