| Package | Affected versions | Patched versions |
|---|---|---|
| org.jboss.xnio:xnio-all | ≤ 3.8.7.Final | |
| single sign-on | = 7.0 | |
| xnio | < 3.8.7 | 3.8.7 |
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up. A fix for this issue is available on the 3.x branch of the repository.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free