title: Xnio: stackoverflowexception when the chain of notifier states becomes problematically big
description: A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).
problem types: Uncontrolled Resource Consumption
affected:
{
product: xnio
vendor: n/a
versions:
version: 3.8.14, status: unaffected
version: 3.8.12.SP1, status: unaffected
version: 3.8.11.SP1, status: unaffected
}
{
vendor: Red Hat
product: Red Hat build of Apache Camel 4.0 for Spring Boot
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:camel_spring_boot:4
}
{
vendor: Red Hat
product: Red Hat build of Apache Camel for Spring Boot
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:camel_spring_boot:3
}
{
vendor: Red Hat
product: Red Hat build of Apache Camel - HawtIO
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:rhboac_hawtio:4
}
{
vendor: Red Hat
product: Red Hat Build of Keycloak
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:build_keycloak:22
}
{
vendor: Red Hat
product: Red Hat Data Grid 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:jboss_data_grid:8
}
{
vendor: Red Hat
product: Red Hat Integration Camel K
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: affected
cpes: cpe:/a:redhat:integration:1
}
{
vendor: Red Hat
product: Red Hat JBoss Data Grid 7
collectionURL: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:jboss_data_grid:7
}
{
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 7
collectionURL: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
packageName: xnio
defaultStatus: affected
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7
}
{
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 8
collectionURL: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
packageName: xnio
defaultStatus: unaffected
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:8
}
{
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform Expansion Pack
collectionURL: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
packageName: xnio
defaultStatus: unaffected
cpes: cpe:/a:redhat:jbosseapxp
}
{
vendor: Red Hat
product: Red Hat JBoss Fuse Service Works 6
collectionURL: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:jboss_fuse_service_works:6
}
{
vendor: Red Hat
product: Red Hat Process Automation 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:jboss_enterprise_bpms_platform:7
}
{
vendor: Red Hat
product: Red Hat Single Sign-On 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: xnio
defaultStatus: unknown
cpes: cpe:/a:redhat:red_hat_single_sign_on:7
}
metrics:
other: [
content: {'value': 'Important', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]
workarounds: There is currently no mitigation available for this vulnerability. Please keep the packages up-to-date as the updates become available.