CVE-2023-5685CWE-400denial-of-service

CVE-2023-5685

High · published March 22, 2024

CVSS v3.1
7.5
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03479 · 89.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-03-22T23:15Z
References (16)
https://access.redhat.com/errata/RHSA-2023:7637 · [email protected]https://access.redhat.com/errata/RHSA-2023:7638 · [email protected]https://access.redhat.com/errata/RHSA-2023:7639 · [email protected]https://access.redhat.com/errata/RHSA-2023:7641 · [email protected]https://access.redhat.com/errata/RHSA-2024:10207 · [email protected]https://access.redhat.com/errata/RHSA-2024:10208 · [email protected]https://access.redhat.com/errata/RHSA-2024:2707 · [email protected]https://access.redhat.com/security/cve/CVE-2023-5685 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2241822 · [email protected]https://access.redhat.com/errata/RHSA-2023:7637 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2023:7638 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2023:7639 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2023:7641 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:2707 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/security/cve/CVE-2023-5685 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2241822 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 MAR 18:24Z
    Xnio: stackoverflowexception when the chain of notifier states becomes problematically big
    cvelistv5