Uploaded image for project: 'AMQ Streams'
  1. AMQ Streams
  2. ENTMQST-5886

CVE-2023-43642 flaw was found in SnappyInputStream in snappy-java

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • 2.7.0.GA, 2.5.2.GA
    • None
    • None
    • None

      A flaw was found in SnappyInputStream in snappy-java, a data compression library in Java. This issue occurs when decompressing data with a too-large chunk size due to a missing upper bound check on chunk length. An unrecoverable fatal error can occur, resulting in a Denial of Service (DoS).
      https://access.redhat.com/security/cve/cve-2023-43642

              Unassigned Unassigned
              chfoley Christopher Foley
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: