CVE-2023-5685

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Mar 22, 2024
Source updated: Sep 14, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Xnio: stackoverflowexception when the chain of notifier states becomes problematically big

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Red Hat build of Apache Camel 4.4.0 for Spring Boot

Vendor: Red Hat
Product: Red Hat build of Apache Camel 4.4.0 for Spring Boot
Platforms: Unknown
Default status: unaffected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Enterprise Application Platform

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform
Platforms: Unknown
Default status: affected
Package: org.jboss.xnio/xnio-nio
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

Red Hat JBoss Enterprise Application Platform · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.8.11.SP1-redhat-00001	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-apache-cxf
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-avro
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.7.6-2.redhat_00003.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-bouncycastle
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.68.0-1.redhat_00005.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-h2database
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.4.197-2.redhat_00005.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jackson-databind
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jboss-marshalling
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.0.15-1.Final_redhat_00001.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jboss-xnio-base
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.5.10-1.Final_redhat_00001.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-wildfly
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:7.1.8-2.GA_redhat_00002.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-xalan-j2
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.7.1-26.redhat_00015.1.ep7.el7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-apache-cxf
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.4.10-1.SP1_redhat_00001.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-avro
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.7.6-8.redhat_00003.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-h2database
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.4.197-3.redhat_00004.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jboss-annotations-api_1.3_spec
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.0.1-4.Final_redhat_00001.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jboss-marshalling
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.0.15-1.Final_redhat_00001.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jboss-server-migration
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.7.2-12.Final_redhat_00013.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jboss-xnio-base
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.7.13-1.Final_redhat_00001.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-log4j-jboss-logmanager
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.2.2-2.Final_redhat_00002.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-wildfly
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:7.3.11-4.GA_redhat_00002.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-wss4j
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.3.3-2.redhat_00001.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-xalan-j2
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.7.1-38.redhat_00015.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-xml-security
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.2.3-2.redhat_00001.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Platforms: Unknown
Default status: affected
Package: eap7-jboss-xnio-base
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.11-1.SP1_redhat_00001.1.el8eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Platforms: Unknown
Default status: affected
Package: eap7-jboss-xnio-base
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.11-1.SP1_redhat_00001.1.el9eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Platforms: Unknown
Default status: affected
Package: eap7-jboss-xnio-base
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.11-1.SP1_redhat_00001.1.el7eap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat build of Apache Camel for Spring Boot 3

Vendor: Red Hat
Product: Red Hat build of Apache Camel for Spring Boot 3
Platforms: Unknown
Default status: unaffected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat build of Apache Camel - HawtIO 4

Vendor: Red Hat
Product: Red Hat build of Apache Camel - HawtIO 4
Platforms: Unknown
Default status: affected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Build of Keycloak

Vendor: Red Hat
Product: Red Hat Build of Keycloak
Platforms: Unknown
Default status: unaffected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Data Grid 8

Vendor: Red Hat
Product: Red Hat Data Grid 8
Platforms: Unknown
Default status: unaffected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Integration Camel K 1

Vendor: Red Hat
Product: Red Hat Integration Camel K 1
Platforms: Unknown
Default status: affected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Data Grid 7

Vendor: Red Hat
Product: Red Hat JBoss Data Grid 7
Platforms: Unknown
Default status: unknown
Package: xnio
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Enterprise Application Platform 8

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 8
Platforms: Unknown
Default status: unaffected
Package: xnio-nio
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Enterprise Application Platform Expansion Pack

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform Expansion Pack
Platforms: Unknown
Default status: unaffected
Package: xnio-nio
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Fuse Service Works 6

Vendor: Red Hat
Product: Red Hat JBoss Fuse Service Works 6
Platforms: Unknown
Default status: unknown
Package: xnio
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat Process Automation 7

Vendor: Red Hat
Product: Red Hat Process Automation 7
Platforms: Unknown
Default status: affected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Single Sign-On 7

Vendor: Red Hat
Product: Red Hat Single Sign-On 7
Platforms: Unknown
Default status: unaffected
Package: xnio
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.