VDB
BDU%3A2023-05358
BDU%3A2023-05358
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции shuffle(int[] input) библиотеки быстрого сжатия/распаковки snappy-java, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wazuh, Inc, OpenSearch, Сообщество свободного программного обеспечения | Wazuh, Logstash, snappy-java |
Timeline
- Sep 8, 2023 CVE Published
- Sep 13, 2024 CVE Updated
References
- https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/BitShuffle.java#L107 url
- https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/BitShuffle.java url
- https://www.cybersecurity-help.cz/vdb/SB2023061517 url
- https://vuldb.com/?id.231666 url
- https://github.com/xerial/snappy-java/commit/820e2e074c58748b41dbd547f4edba9e108ad905 advisory
- https://github.com/xerial/snappy-java/security/advisories/GHSA-pqr6-cmr2-h8hf advisory