Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

CVE-2023-34455 snappy-java OOM. Analysis of vulnerability

Description

Severity: High
Modules impacted:

mod-entities-links Spitfire
mod-search Spitfire
mod-remote-storage Volaris 

Link: https://nvd.nist.gov/vuln/detail/CVE-2023-34455

Package Name: org.xerial.snappy_snappy-java

Fixed in fixed in 1.1.10.1

Checklist

hide

TestRail: Results

Activity

Show:

Denis November 17, 2023 at 11:46 AM

Hi
from scan results we see that there are additional modules potentially impacted by CVE. Could you please check?

mod-data-export-spring Firebird
mod-data-export-worker Firebird
mod-bulk-operations Firebird
mod-service-interaction K-Int
mod-agreements Bienenvolk (fka ERM)
mod-licenses Bienenvolk (fka ERM)
mod-quick-marc Spitfire

cc

Done

Details

Assignee

Reporter

Priority

RCA Group

TBD

Labels

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs
Created November 1, 2023 at 9:04 PM
Updated May 3, 2024 at 10:02 AM
Resolved November 9, 2023 at 4:54 PM
Configure
TestRail: Cases
TestRail: Runs