[CASSANDRA-18886] snappy-java-1.1.10.1 vulnerability: CVE-2023-43642

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Duplicate
• Fix Version/s: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 5.0.x, 5.x
• Component/s: Feature/Compression
• Bug Category: Security - Denial of Service
• Severity: Normal
• Complexity: Normal
• Discovered By: User Report
• Platform: All
• Assignee: Brandon Williams
• Reporter: Brandon Williams

Authors

Brandon Williams

• Created: 27/Sep/23 13:11
• Updated: 27/Sep/23 20:06
• Resolved: 27/Sep/23 19:57

Description

https://nvd.nist.gov/vuln/detail/CVE-2023-43642

Another DoS which is probably not a huge deal, but we can upgrade.

Issue Links

• duplicates: CASSANDRA-18878 Upgrade snappy java library