Integer Overflow

🗓️ 20 Jun 2023 02:40:29Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 35 Views

snappy-java BitShuffle vulnerability causing application cras

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: Vulnerability in snappy-java affects IBM Process Mining . CVE-2023-34453	9 Oct 202310:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to denial of service attacks due to snappy-java (CVE-2023-34453, CVE-2023-34455, CVE-2023-34454)	29 Aug 202309:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for October 2023	26 Mar 202504:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in snappy-java affects watsonx.data	30 Jan 202512:42	–	ibm
IBM Security Bulletins	Security Bulletin: Snappy-java is vulnerable to security CVEs used in IBM Maximo Application Suite - Monitor Component	24 Jul 202321:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	14 Feb 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 May 202415:38	–	ibm
IBM Security Bulletins	Security Bulletin: Kafka nodes in IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a denial of service due to snappy-java (CVE-2023-34453, CVE-2023-34455, CVE-2023-34454).	14 Aug 202308:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary Component uses zookeeper-3.5.9.jar and snappy-java-1.1.8.3.jar which are vulnerable to CVE-2023-44981,CVE-2023-34453, CVE-2023-34455 , CVE-2023-34454 and CVE-2023-43642	7 Jun 202406:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operations Analytics Predictive Insights.	27 Mar 202415:37	–	ibm

Vulners

Node

xerial snappy-javaRange1.1.3-M2–1.1.10.0java

xerial snappy-javaMatch1.1.3-m1java

Source	Link
github	www.github.com/xerial/snappy-java/commit/820e2e074c58748b41dbd547f4edba9e108ad905
github	www.github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/BitShuffle.java
github	www.github.com/xerial/snappy-java/security/advisories/GHSA-pqr6-cmr2-h8hf
github	www.github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/BitShuffle.java

27 Jun 2023 16:44Current

10High risk

Vulners AI Score10

CVSS 3.15.9 - 7.5

EPSS0.01503

SSVC