Lucene search

K

[email protected]NVD:CVE-2020-14340

HistoryJun 02, 2021 - 1:15 p.m.

CVE-2020-14340

2021-06-0213:15:08

CWE-400

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.8%

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

Affected configurations

NVD

Node

redhatxnioRange3.6.1–3.7.9

OR

redhatxnioRange3.8.0–3.8.2

OR

redhatxnioMatch3.6.0beta1

OR

redhatxnioMatch3.6.0beta2

Node

redhatjboss_brmsMatch5

OR

redhatjboss_brmsMatch6

OR

redhatjboss_data_gridMatch6.0.0

OR

redhatjboss_data_gridMatch7.0.0

OR

redhatjboss_data_virtualizationMatch6.0.0-

OR

redhatjboss_enterprise_application_platformMatch5.0.0

OR

redhatjboss_enterprise_application_platformMatch6.0.0

OR

redhatjboss_fuseMatch6.0.0

OR

redhatjboss_fuseMatch7.0.0

OR

redhatjboss_operations_networkMatch3.0

OR

redhatjboss_soa_platformMatch5

Node

oraclecommunications_cloud_native_core_consoleMatch1.9.0

OR

oraclecommunications_cloud_native_core_network_repository_functionMatch1.14.0

OR

oraclecommunications_cloud_native_core_policyMatch1.14.0

OR

oraclecommunications_cloud_native_core_security_edge_protection_proxyMatch1.15.0

OR

oraclecommunications_cloud_native_core_service_communication_proxyMatch1.14.0

OR

oraclecommunications_cloud_native_core_unified_data_repositoryMatch1.14.0

References

bugzilla.redhat.com/show_bug.cgi?id=1860218

www.oracle.com/security-alerts/cpuapr2022.html

www.oracle.com/security-alerts/cpujan2022.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.8%

Related for NVD:CVE-2020-14340

prion1 cve1 osv2 debiancve1 cvelist1 ubuntucve1 veracode1 github1 redhatcve1 nessus3 redhat7 oracle2