# CVE-2023-5685

## Summary

- **CVE ID:** CVE-2023-5685
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** CWE-400
- **Published:** Mar 22, 2024
- **Last Modified:** Sep 14, 2026

## Description

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

## Affected Products

- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:3.1.16-3.SP1_redhat_00001.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:1.7.6-2.redhat_00003.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:1.68.0-1.redhat_00005.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:1.4.197-2.redhat_00005.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:2.0.15-1.Final_redhat_00001.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:3.5.10-1.Final_redhat_00001.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:7.1.8-2.GA_redhat_00002.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (0:2.7.1-26.redhat_00015.1.ep7.el7)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:3.4.10-1.SP1_redhat_00001.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:1.7.6-8.redhat_00003.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:1.4.197-3.redhat_00004.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:2.0.1-4.Final_redhat_00001.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:2.0.15-1.Final_redhat_00001.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:1.7.2-12.Final_redhat_00013.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:3.7.13-1.Final_redhat_00001.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:1.2.2-2.Final_redhat_00002.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:7.3.11-4.GA_redhat_00002.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:2.3.3-2.redhat_00001.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:2.7.1-38.redhat_00015.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 (0:2.2.3-2.redhat_00001.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 (0:3.8.11-1.SP1_redhat_00001.1.el8eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 (0:3.8.11-1.SP1_redhat_00001.1.el9eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 (0:3.8.11-1.SP1_redhat_00001.1.el7eap)
- Red Hat — Red Hat JBoss Enterprise Application Platform (3.8.11.SP1-redhat-00001)

## References

- [CNA](https://access.redhat.com/errata/RHSA-2023:7637)
- [CNA](https://access.redhat.com/errata/RHSA-2023:7638)
- [CNA](https://access.redhat.com/errata/RHSA-2023:7639)
- [CNA](https://access.redhat.com/errata/RHSA-2023:7641)
- [CNA](https://access.redhat.com/errata/RHSA-2024:10207)
- [CNA](https://access.redhat.com/errata/RHSA-2024:10208)
- [CNA](https://access.redhat.com/errata/RHSA-2024:2707)
- [CNA](https://access.redhat.com/security/cve/CVE-2023-5685)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2241822)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.47%
- **EPSS Percentile:** 64.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-19._