CVE-2020-14340: 
Java vulnerability analysis and mitigation

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final (NVD).

The vulnerability is related to file descriptor leaks in XNIO's NIO Selector handling mechanism. The issue occurs between garbage collection cycles where file handles accumulate without being properly released. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.9 (Medium) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating network accessibility with high attack complexity and potential impact on system availability (NVD).

The vulnerability can lead to a denial of service condition by exhausting system resources through unreleased file descriptors. This can affect the availability of systems running the vulnerable XNIO versions (NVD).

The vulnerability requires network access but has high attack complexity. No authentication is required to exploit the vulnerability, though no known exploits were publicly available at the time of disclosure (NVD).

The vulnerability has been fixed in XNIO versions 3.7.9.Final, 3.8.2.Final, and 3.9.0.Final. Users are advised to upgrade to these or later versions. Red Hat has released security updates for affected products through multiple security advisories (Red Hat Bugzilla).