Xerial Snappy-Java
4 CVEs affecting Xerial Snappy-Java. Latest disclosed: 2023-09-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-43642 | High | 7.5 | 2023-09-25 | snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of… |
CVE-2023-34455 | High | 7.5 | 2023-06-15 | snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal error can occur in versions prior to 1… |
CVE-2023-34454 | Medium | 5.9 | 2023-06-15 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing… |
CVE-2023-34453 | Medium | 5.9 | 2023-06-15 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing… |