CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2020-14340
Medium (5.9). EPSS 2.2% chance of exploitation in the next 30 days. Fixed in org.jboss.xnio:xnio-nio 3.7.9.Final, 3.8.2.Final.
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
Severity
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- oracle:communications_cloud_native_core_console
- oracle:communications_cloud_native_core_network_repository_function
- oracle:communications_cloud_native_core_policy
- oracle:communications_cloud_native_core_security_edge_protection_proxy
- oracle:communications_cloud_native_core_service_communication_proxy
- oracle:communications_cloud_native_core_unified_data_repository
- redhat:jboss_brms
- redhat:jboss_data_grid
- redhat:jboss_data_virtualization
- redhat:jboss_enterprise_application_platform
- redhat:jboss_fuse
- redhat:jboss_operations_network
- redhat:jboss_soa_platform
- redhat:xnio
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-c738-77x8-wmq5 | Maven | org.jboss.xnio:xnio-nio | >=3.8.0.Final <3.8.2.Final | 3.8.2.Final |
| GHSA-c738-77x8-wmq5 | Maven | org.jboss.xnio:xnio-nio | >=3.6.0 <3.7.9.Final | 3.7.9.Final |