VDB
BDU%3A2023-05357
BDU%3A2023-05357
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции hasNextChunk библиотеки быстрого сжатия/распаковки snappy-java, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wazuh, Inc, OpenSearch, Сообщество свободного программного обеспечения | Wazuh, Logstash, snappy-java |
Timeline
- Sep 8, 2023 CVE Published
- Sep 13, 2024 CVE Updated
References
- https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/SnappyInputStream.java#L388 url
- https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/SnappyInputStream.java url
- https://github.com/xerial/snappy-java/security/advisories/GHSA-qcwq-55hx-v3vh url
- https://vuldb.com/?id.231667 url
- https://www.cybersecurity-help.cz/vdb/SB2023061517 url
- https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea advisory