CVE-2022-0084

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
n/a	xnio	Fixed in v3.x

References

https://access.redhat.com/security/cve/CVE-2022-0084Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2064226Issue Tracking, Vendor Advisory
https://github.com/xnio/xnio/commit/fdefb3b8b715d33387cadc4d48991fb1989b0c12Patch, Third Party Advisory
https://github.com/xnio/xnio/pull/291Patch, Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-0084Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2064226Issue Tracking, Vendor Advisory
https://github.com/xnio/xnio/commit/fdefb3b8b715d33387cadc4d48991fb1989b0c12Patch, Third Party Advisory
https://github.com/xnio/xnio/pull/291Patch, Third Party Advisory

Timeline

Published: Aug 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-00855.3Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.CVE-2022-00869.8uppy is vulnerable to Server-Side Request Forgery (SSRF)CVE-2022-00876.1keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-00887.4Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.CVE-2022-00906.5An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is CVE-2022-00934.3An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab all CVE-2022-00968.8Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a craf CVE-2022-00979.6Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malici CVE-2022-00988.8Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform spe CVE-2022-00998.8Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user ges CVE-2022-01008.8Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corru CVE-2022-01018.8Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific