https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:37:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-10701 EUVD-2026-10701 https://cve.radiocsirt.org/vuln/euvd-2026-10701 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0084 <p>A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.</p> <p>A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0084 https://cve.radiocsirt.org/vuln/ghsa-76fg-mhrg-fmmg <p><strong>Affected:</strong> Maven: org.jboss.xnio:xnio-all</p> <p>A flaw was found in XNIO, specifically in the `notifyReadClosed` method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up. A fix for this issue is available on the `3.x` branch of the repository.</p> <p><strong>Affected:</strong> Maven: org.jboss.xnio:xnio-all</p> <p>A flaw was found in XNIO, specifically in the `notifyReadClosed` method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up. A fix for this issue is available on the `3.x` branch of the repository.</p> https://cve.radiocsirt.org/vuln/ghsa-76fg-mhrg-fmmg https://cve.radiocsirt.org/vuln/gsd-2022-0084 gsd-2022-0084 https://cve.radiocsirt.org/vuln/gsd-2022-0084 https://cve.radiocsirt.org/vuln/oesa-2026-1047 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: xnio, openEuler:24.03-LTS: xnio, openEuler:24.03-LTS-SP1: xnio, openEuler:24.03-LTS-SP2: xnio, openEuler:24.03-LTS-SP3: xnio, openEuler:20.03-LTS-SP4: xnio, openEuler:22.03-LTS-SP3: xnio</p> <p>XNIO is a simplified low-level I/O layer which can be used anywhere you are using NIO today. It frees you from the hassle of dealing with Selectors and the lack of NIO support for multicast sockets and non-socket I/O, while still maintaining all the capabilities present in NIO, and it opens the door to non-obvious optimizations. Security Fix(es):</p> <p>A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.(CVE-2022-0084)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: xnio, openEuler:24.03-LTS: xnio, openEuler:24.03-LTS-SP1: xnio, openEuler:24.03-LTS-SP2: xnio, openEuler:24.03-LTS-SP3: xnio, openEuler:20.03-LTS-SP4: xnio, openEuler:22.03-LTS-SP3: xnio</p> <p>XNIO is a simplified low-level I/O layer which can be used anywhere you are using NIO today. It frees you from the hassle of dealing with Selectors and the lack of NIO support for multicast sockets and non-socket I/O, while still maintaining all the capabilities present in NIO, and it opens the door to non-obvious optimizations. Security Fix(es):</p> <p>A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.(CVE-2022-0084)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1047 https://cve.radiocsirt.org/vuln/rhsa-2022:2232 <p>jackson-databind: denial of service via a large depth of nested objects Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr</p> <p>jackson-databind: denial of service via a large depth of nested objects Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr</p> https://cve.radiocsirt.org/vuln/rhsa-2022:2232 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0084 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: jboss-xnio, Ubuntu:18.04:LTS: jboss-xnio, Ubuntu:20.04:LTS: jboss-xnio, Ubuntu:22.04:LTS: jboss-xnio, Ubuntu:24.04:LTS: jboss-xnio, Ubuntu:25.10: jboss-xnio, Ubuntu:26.04:LTS: jboss-xnio</p> <p>A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: jboss-xnio, Ubuntu:18.04:LTS: jboss-xnio, Ubuntu:20.04:LTS: jboss-xnio, Ubuntu:22.04:LTS: jboss-xnio, Ubuntu:24.04:LTS: jboss-xnio, Ubuntu:25.10: jboss-xnio, Ubuntu:26.04:LTS: jboss-xnio</p> <p>A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0084 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607