Lucene search

K
redhatcveRedhat.comRH:CVE-2023-34454
HistoryAug 08, 2023 - 5:21 p.m.

CVE-2023-34454

2023-08-0817:21:28
redhat.com
access.redhat.com
32
cve-2023-34454
snappy-java
shuffle function
denial of service
overflow error
input sizes

0.001 Low

EPSS

Percentile

22.3%

A flaw was found in Snappy-java’s shuffle function, which does not check input sizes before beginning operations. This issue could allow an attacker to send malicious input to trigger an overflow error that crashes the program, resulting in a denial of service.