Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/jboss-xnio@3.8.4-1?distro=trixie
purl pkg:deb/debian/jboss-xnio@3.8.4-1?distro=trixie
Next non-vulnerable version 3.8.7-2
Latest non-vulnerable version 3.8.10-1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-e3vc-jpft-gye7
Aliases:
CVE-2022-0084
GHSA-76fg-mhrg-fmmg
XNIO `notifyReadClosed` method logging message to unexpected end A flaw was found in XNIO, specifically in the `notifyReadClosed` method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up. A fix for this issue is available on the `3.x` branch of the repository.
3.8.7-2
Affected by 0 other vulnerabilities.
3.8.8-1
Affected by 0 other vulnerabilities.
3.8.10-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jcvv-g8kh-ffag Uncontrolled Resource Consumption in XNIO A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final. CVE-2020-14340
GHSA-c738-77x8-wmq5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:09:28.188851+00:00 Debian Importer Fixing VCID-jcvv-g8kh-ffag https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T18:07:52.080066+00:00 Debian Importer Fixing VCID-jcvv-g8kh-ffag https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:27:49.285252+00:00 Debian Importer Affected by VCID-e3vc-jpft-gye7 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:27:49.260450+00:00 Debian Importer Fixing VCID-jcvv-g8kh-ffag https://security-tracker.debian.org/tracker/data/json 38.1.0