CVE-2020-14340: redhat xnio +13 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-14340

CVSS 5.9 · Medium EPSS 2,2%

Kerentanan Uncontrolled Resource Consumption pada redhat xnio, redhat jboss brms +12 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.

Rincian

Terbit di NVD: 2 Juni 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-400: Uncontrolled Resource Consumption
EPSS (30 hari): 2,2% peluang dieksploitasi; lebih tinggi dari 82,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
redhat	xnio	Versi 3.6.1 hingga sebelum 3.7.9
redhat	xnio	Versi 3.8.0 hingga sebelum 3.8.2
redhat	xnio	Versi 3.6.0 beta1
redhat	xnio	Versi 3.6.0 beta2
redhat	jboss brms	Versi 5
redhat	jboss brms	Versi 6
redhat	jboss data grid	Versi 6.0.0
redhat	jboss data grid	Versi 7.0.0
redhat	jboss data virtualization	Versi 6.0.0
redhat	jboss enterprise application platform	Versi 5.0.0
redhat	jboss enterprise application platform	Versi 6.0.0
redhat	jboss fuse	Versi 6.0.0
redhat	jboss fuse	Versi 7.0.0
redhat	jboss operations network	Versi 3.0
redhat	jboss soa platform	Versi 5
oracle	communications cloud native core console	Versi 1.9.0
oracle	communications cloud native core network repository function	Versi 1.14.0
oracle	communications cloud native core policy	Versi 1.14.0
oracle	communications cloud native core security edge protection proxy	Versi 1.15.0
oracle	communications cloud native core service communication proxy	Versi 1.14.0
oracle	communications cloud native core unified data repository	Versi 1.14.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://bugzilla.redhat.com/show_bug.cgi?id=1860218 issue tracking · advisory vendor
https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.