Lucene search

K
redhatcveRedhat.comRH:CVE-2023-43642
HistoryOct 02, 2023 - 10:24 a.m.

CVE-2023-43642

2023-10-0210:24:58
redhat.com
access.redhat.com
38
cve-2023-43642
snappyinputstream
snappy-java
data compression
java
missing upper bound check
chunk length
dos

0.0005 Low

EPSS

Percentile

15.9%

A flaw was found in SnappyInputStream in snappy-java, a data compression library in Java. This issue occurs when decompressing data with a too-large chunk size due to a missing upper bound check on chunk length. An unrecoverable fatal error can occur, resulting in a Denial of Service (DoS).