CVE-2023-34454

CVSS Score of 10 (low)

Details

Published Jun 15, 2023
Updated: Jun 27, 2023
CWE ID 190

Summary

CVE-2023-34454 is a vulnerability affecting the snappy-java library prior to version 1.1.10.1. The vulnerability arises due to unchecked multiplications in the compress function in the Snappy.java file, which can lead to an integer overflow. This overflow causes an unrecoverable fatal error when allocating a byte array, resulting in a java.lang.NegativeArraySizeException exception. The vulnerability has a risk score of 27 and is classified as medium to high severity. It affects multiple products and poses a potential danger to organizations that use these products, as it could be exploited by attackers to cause denial of service or other malicious activities. Remediation involves updating the affected snappy-java library to version 1.1.10.1 or later.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-34454 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options