VDB
BDU%3A2023-05356
BDU%3A2023-05356
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции compress(char[] input) библиотеки быстрого сжатия/распаковки snappy-java, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wazuh, Inc, OpenSearch, Сообщество свободного программного обеспечения | Wazuh, Logstash, snappy-java |
Timeline
- Sep 8, 2023 CVE Published
References
- https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L169 url
- https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L422 url
- https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/Snappy.java url
- https://github.com/xerial/snappy-java/commit/d0042551e4a3509a725038eb9b2ad1f683674d94 url
- https://github.com/xerial/snappy-java/security/advisories/GHSA-fjpj-2g6w-x25r url
- https://www.cybersecurity-help.cz/vdb/SB2023061517 url
- https://vuldb.com/?id.231664 url