Lucene search
Redhat.comRH:CVE-2023-34455HistoryAug 08, 2023 - 5:51 p.m.
CVE-2023-34455
2023-08-0817:51:24
redhat.com
access.redhat.com
29
snappy-java
filesnappyinputstream
dos
denial of service
cve-2023-34455
out of memory error
0.001 Low
EPSS
Percentile
22.3%
A flaw was found in Snappy-java’s fileSnappyInputStream hasNextChunk function, which does not sufficiently evaluate input bytes before beginning operations. This issue could allow an attacker to send malicious input to trigger an out of memory error that crashes the program, resulting in a denial of service.
Related
veracode
veracode
Denial Of Service (DoS)
2023-06-20 04:13:38
atlassian
atlassian
osv
osv
CVE-2023-34455
2023-06-15 18:15:09
snappy-java's unchecked chunk length leads to DoS
2023-06-15 17:15:06
ubuntucve
ubuntucve
CVE-2023-34455
2023-06-15 00:00:00
cve
cve
CVE-2023-34455
2023-06-15 18:15:09
prion
prion
Design/Logic Flaw
2023-06-15 18:15:00
cvelist
cvelist
CVE-2023-34455 snappy-java's unchecked chunk length leads to DoS
2023-06-15 17:15:00
github
github
snappy-java's unchecked chunk length leads to DoS
2023-06-15 17:15:06
redhat
redhat
ibm
ibm
Security Bulletin: IBM Event Streams is vulnerable to denial of service attacks due to snappy-java (CVE-2023-34453, CVE-2023-34455, CVE-2023-34454)
2023-08-29 09:37:52
nessus
nessus
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00