7.5

CVE-2023-5685

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorRed Hat
≫
Product EAP 7.4.14
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat build of Apache Camel 4.4.0 for Spring Boot
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:1.7.6-2.redhat_00003.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:1.68.0-1.redhat_00005.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:1.4.197-2.redhat_00005.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.0.15-1.Final_redhat_00001.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:3.5.10-1.Final_redhat_00001.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:7.1.8-2.GA_redhat_00002.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.7.1-26.redhat_00015.1.ep7.el7
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:3.4.10-1.SP1_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:1.7.6-8.redhat_00003.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:1.4.197-3.redhat_00004.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.0.1-4.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.0.15-1.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:1.7.2-12.Final_redhat_00013.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:3.7.13-1.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:1.2.2-2.Final_redhat_00002.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:7.3.11-4.GA_redhat_00002.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.3.3-2.redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.7.1-38.redhat_00015.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Default Statusaffected
Version < *
Version 0:2.2.3-2.redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:3.8.11-1.SP1_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:3.8.11-1.SP1_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:3.8.11-1.SP1_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat build of Apache Camel for Spring Boot 3
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat build of Apache Camel - HawtIO 4
Default Statusaffected
VendorRed Hat
≫
Product Red Hat Build of Keycloak
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat Data Grid 8
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat Integration Camel K 1
Default Statusaffected
VendorRed Hat
≫
Product Red Hat JBoss Data Grid 7
Default Statusunknown
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat JBoss Fuse Service Works 6
Default Statusunknown
VendorRed Hat
≫
Product Red Hat Process Automation 7
Default Statusaffected
VendorRed Hat
≫
Product Red Hat Single Sign-On 7
Default Statusunaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.38% 0.587
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secalert@redhat.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.