Vulnerabilities

TI-2023-23368 CVE-2023-43642 · GHSA-55g7-9cwv-5qfv

Missing upper bound check on chunk length in snappy-java

HIGH 72

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01211 Published 2023-09-25 Partial fix · 1.1.10.4 CWE-770

TI-2023-17281 CVE-2023-34455 · GHSA-qcwq-55hx-v3vh

HIGH 72

snappy-java is a fast compressor/decompressor for Java.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01762 Published 2023-06-15 Partial fix · 1.1.10.1 CWE-770

TI-2023-17280 CVE-2023-34454 · GHSA-fjpj-2g6w-x25r

HIGH 66

snappy-java is a fast compressor/decompressor for Java.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01469 Published 2023-06-15 Partial fix · 1.1.10.1 CWE-190

TI-2023-17279 CVE-2023-34453 · GHSA-pqr6-cmr2-h8hf

HIGH 66

snappy-java is a fast compressor/decompressor for Java.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01707 Published 2023-06-15 Partial fix · 1.1.10.1 CWE-190