Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-0084

Опубликовано: 26 авг. 2022
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:integration_camel_quarkus:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:xnio:*:*:*:*:*:*:*:*
Версия до 3.8.7 (исключая)

EPSS

Процентиль: 72%
0.01486
Низкий

7.5 High

CVSS3

Дефекты

CWE-770
CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 4 лет назад

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

CVSS3: 7.5
redhat
больше 4 лет назад

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

CVSS3: 7.5
debian
около 4 лет назад

A flaw was found in XNIO, specifically in the notifyReadClosed method. ...

CVSS3: 7.5
github
около 4 лет назад

XNIO `notifyReadClosed` method logging message to unexpected end

EPSS

Процентиль: 72%
0.01486
Низкий

7.5 High

CVSS3

Дефекты

CWE-770
CWE-770
Уязвимость CVE-2022-0084