Netty 资源管理错误漏洞

Netty is a non-blocking I/O client-server framework from the Netty community that is primarily used to develop Java web applications such as protocol servers and clients. Netty suffers from a Resource Management Error vulnerability that stems from the Snappy frame decoder function not limiting th...

CVE-2021-37137

CVE-2021-37137 involves Netty’s Snappy frame decoding where the SnappyFrameDecoder does not restrict the chunk length, enabling potential excessive memory usage. The issue can be triggered by crafted input that decompresses to a very large size (via network streams or files) or by sending a very ...

Denial Of Service(DoS)

netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Snappy frame decoder function, leading to an OOME...

PT-2021-7976 · Netty +5 · Netty +5

Name of the Vulnerable Software and Affected Versions: Netty versions prior to 4.1.67.Final Description: The Snappy frame decoder function does not restrict the chunk length, which may lead to excessive memory usage. Additionally, it may buffer reserved skippable chunks until the whole chunk is...

[SECURITY] Fedora 33 Update: snapd-2.49-1.fc33

Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...

[SECURITY] Fedora 32 Update: snapd-2.49-1.fc32

Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...

Fedora: Security Advisory for snapd (FEDORA-2021-734cbde4c6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

snappy bug fix and enhancement update

An update is available for snappy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

[SECURITY] Fedora 31 Update: snapd-2.45.2-1.fc31

Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...

Photon OS 1.0: Snappy PHSA-2019-1.0-0235

An update of the snappy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0235. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12540...

Photon OS 2.0: Snappy PHSA-2019-2.0-0160

An update of the snappy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12539...

Critical Photon OS Security Update - PHSA-2019-0160

Updates of 'linux-aws', 'mysql', 'keepalived', 'glibc', 'linux-secure', 'libpng', 'snappy', 'linux-esx', 'mercurial', 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0235

Updates of 'snappy', 'mercurial', 'linux', 'linux-esx', 'keepalived' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0235

An update of 'keepalived', 'linux-esx', 'linux', 'snappy', 'mercurial' packages of Photon OS has been released...

GHSA-QX2V-J445-G354 Improper Input Validation in Google TensorFlow

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

PYSEC-2019-207

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

CVE-2018-7577

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

CVE-2018-7577

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...