PT-2023-9216 · Xnio+1 · Xnio+1
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
XNIO versions prior to 3.8.14.Final
Description
A flaw was found in XNIO, specifically in the NotifierState, which can cause a Stack Overflow Exception when the chain of notifier states becomes large. This can lead to uncontrolled resource management and a possible denial of service (DoS). The issue is related to uncontrolled resource consumption in the NotifierState, allowing a remote attacker to cause a denial of service.
Recommendations
For versions prior to 3.8.14.Final, update to version 3.8.14.Final to resolve the issue. As a temporary workaround, consider restricting the size of the notifier state chain to prevent the Stack Overflow Exception.
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Xnio