Red Hat Xnio vulnerabilities

2 CVEs affecting Red Hat Xnio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-0084, published 2022-08-26.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-14340, published 2021-06-02. Medium severity, CVSS 5.9. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial…
• CVE-2022-0084, published 2022-08-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed…