Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44031
HistoryOct 27, 2023 - 6:43 p.m.

Denial Of Service (DoS)

2023-10-2718:43:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
snappy-java
denial of service
vulnerability
chunk size

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

15.9%

Snappy-Java is vulnerable to Denial of Service (DoS). The vulnerability is due to the lack of a max chunk length check, allowing an attacker to decompress data with a chunk size which is too large to process resulting in Denial of Service.

CPENameOperatorVersion
snappy-javale1.1.10.3
snappy-javale1.1.10.3

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

15.9%