Uploaded image for project: 'AMQ Streams'
  1. AMQ Streams
  2. ENTMQST-5886

CVE-2023-43642 flaw was found in SnappyInputStream in snappy-java

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • 2.7.0.GA
    • None
    • None
    • None

      A flaw was found in SnappyInputStream in snappy-java, a data compression library in Java. This issue occurs when decompressing data with a too-large chunk size due to a missing upper bound check on chunk length. An unrecoverable fatal error can occur, resulting in a Denial of Service (DoS).
      https://access.redhat.com/security/cve/cve-2023-43642

            Unassigned Unassigned
            chfoley Christopher Foley
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: