https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:52:22.055873+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00588 bdu:2024-00588 2026-10-03T09:52:22.254844+00:00 bdu:2024-00588 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1007 certfr-2023-avi-1007 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T09:52:22.254903+00:00 certfr-2023-avi-1007 https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187 Withdrawn: CLEANSTART-2026-CU18187 — Security fixes in stargate 1.0.90-r4 2026-10-03T09:52:22.254939+00:00

Withdrawn by the publisher.

Affected: CleanStart: stargate

Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...

 https://cve.radiocsirt.org/vuln/euvd-2026-187480 EUVD-2026-187480 2026-10-03T09:52:22.254988+00:00 EUVD-2026-187480 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43642 fkie_cve-2023-43642 2026-10-03T09:52:22.255010+00:00

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has been introduced in commit `9f8c3cf74` which will be included in the 1.1.10.4 release. Users are advised to upgrade. Users unable to upgrade should only accept compressed data from trusted sources.

 https://cve.radiocsirt.org/vuln/ghsa-55g7-9cwv-5qfv GHSA-55g7-9cwv-5qfv — snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact 2026-10-03T09:52:22.255051+00:00

Affected: Maven: org.xerial.snappy:snappy-java

### Summary

snappy-java is a data compression library in Java. Its SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too-large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur.

### Scope

All versions of snappy-java including the latest released version 1.1.10.3. A fix is applied in 1.1.10.4

### Details While performing mitigation efforts related to [CVE-2023-34455](https://nvd.nist.gov/vuln/detail/CVE-2023-34455) in Confluent products, our Application Security team closely analyzed the fix that was accepted and merged into snappy-java version 1.1.10.1 in [this](https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea) commit. The check on [line 421](https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea#diff-c3e53610267092989965e8c7dd2d4417d355ff7f560f9e8075b365f32569079fR421) only attempts to check if chunkSize is not a negative value. We believe that this is an inadequate fix as it misses an upper-bounds check for overly positive values such as 0x7FFFFFFF (or (2,147,483,647 in decimal) before actually [attempting to allocate](https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea#diff-c3e53610267092989965e8c7dd2d4417d355ff7f560f9e8075b365f32569079fR429) the provided unverified number of bytes via the “chunkSize” variable. This missing upper-bounds check can lead to t…

 https://cve.radiocsirt.org/vuln/gsd-2023-43642 gsd-2023-43642 2026-10-03T09:52:22.255126+00:00 gsd-2023-43642 https://cve.radiocsirt.org/vuln/oesa-2023-1700 OESA-2023-1700 — snappy-java security update 2026-10-03T09:52:22.255146+00:00

Affected: openEuler:20.03-LTS-SP1: snappy-java, openEuler:20.03-LTS-SP3: snappy-java, openEuler:22.03-LTS: snappy-java, openEuler:22.03-LTS-SP1: snappy-java, openEuler:22.03-LTS-SP2: snappy-java

A Java port of the snappy, a fast compresser/decompresser written in C++. Security Fix(es): snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has been introduced in commit `9f8c3cf74` which will be included in the 1.1.10.4 release. Users are advised to upgrade. Users unable to upgrade should only accept compressed data from trusted sources.(CVE-2023-43642)

 https://cve.radiocsirt.org/vuln/rhsa-2023:7612 RHSA-2023:7612 — Red Hat Security Advisory: Red Hat build of Quarkus 3.2.9 release and security update 2026-10-03T09:52:22.255203+00:00

quarkus: GraphQL operations over WebSockets bypass apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-43642 UBUNTU-CVE-2023-43642 2026-10-03T09:52:22.255271+00:00

Affected: Ubuntu:14.04:LTS: snappy-java, Ubuntu:16.04:LTS: snappy-java, Ubuntu:18.04:LTS: snappy-java, Ubuntu:20.04:LTS: snappy-java, Ubuntu:22.04:LTS: snappy-java, Ubuntu:24.04:LTS: snappy-java, Ubuntu:25.10: snappy-java, Ubuntu:26.04:LTS: snappy-java

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has been introduced in commit `9f8c3cf74` which will be included in the 1.1.10.4 release. Users are advised to upgrade. Users unable to upgrade should only accept compressed data from trusted sources.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2935 WID-SEC-W-2023-2935 — IBM Integration Bus: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T09:52:22.255328+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Integration Bus ausnutzen, um einen Denial of Service Angriff durchzuführen.