CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

• CWE-770
• CWE-770

• https://access.redhat.com/security/cve/CVE-2022-0084Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2064226Issue Tracking, Vendor Advisory
• https://github.com/xnio/xnio/commit/fdefb3b8b715d33387cadc4d48991fb1989b0c12Patch, Third Party Advisory
• https://github.com/xnio/xnio/pull/291Patch, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2022-0084Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2064226Issue Tracking, Vendor Advisory
• https://github.com/xnio/xnio/commit/fdefb3b8b715d33387cadc4d48991fb1989b0c12Patch, Third Party Advisory
• https://github.com/xnio/xnio/pull/291Patch, Third Party Advisory

Published

Aug 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0072Directory Traversal vulnerability in LiteSpeed Technologies …5.8
• CVE-2022-0073Improper Input Validation vulnerability in LiteSpeed Technol…8.8
• CVE-2022-0074Untrusted Search Path vulnerability in LiteSpeed Technologie…8.8
• CVE-2022-0079showdoc is vulnerable to Generation of Error Message Contain…5.3
• CVE-2022-0080mruby is vulnerable to Heap-based Buffer Overflow9.8
• CVE-2022-0083livehelperchat is vulnerable to Generation of Error Message …5.3
• CVE-2022-0085Server-Side Request Forgery (SSRF) in GitHub repository domp…5.3
• CVE-2022-0086uppy is vulnerable to Server-Side Request Forgery (SSRF)9.8
• CVE-2022-0087keystone is vulnerable to Improper Neutralization of Input D…6.1
• CVE-2022-0088Cross-Site Request Forgery (CSRF) in GitHub repository yourl…7.4
• CVE-2022-0090An issue has been discovered affecting GitLab versions prior…6.5
• CVE-2022-0093An issue has been discovered affecting GitLab versions prior…4.3