xerial records
4 published records for vendor xerial.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-190 Integer Overflow or Wraparound2
- CWE-770 Allocation of Resources Without Limits or Throttling2
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2023-34455No exploit | snappy-java's unchecked chunk length leads to DoSxerial · snappy-java · CWE-770 | High7.5 | — | 1.8% | Jun 15, 2023 |
31Monitor | CVE-2023-34453No exploit | snappy-java's Integer Overflow vulnerability in shuffle leads to DoSxerial · snappy-java · CWE-190 | High7.5 | — | 1.7% | Jun 15, 2023 |
30Monitor | CVE-2023-34454No exploit | snappy-java's Integer Overflow vulnerability in compress leads to DoSxerial · snappy-java · CWE-190 | High7.5 | — | 1.5% | Jun 15, 2023 |
30Monitor | CVE-2023-43642No exploit | Missing upper bound check on chunk length in snappy-javaxerial · snappy-java · CWE-770 | High7.5 | — | 1.2% | Sep 25, 2023 |
- CVE-2023-3445531Monitor
snappy-java's unchecked chunk length leads to DoS
HighCVSS 7.5No exploitEPSS 2%xerial · snappy-javaJun 15, 2023
- CVE-2023-3445331Monitor
snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
HighCVSS 7.5No exploitEPSS 2%xerial · snappy-javaJun 15, 2023
- CVE-2023-3445430Monitor
snappy-java's Integer Overflow vulnerability in compress leads to DoS
HighCVSS 7.5No exploitEPSS 1%xerial · snappy-javaJun 15, 2023
- CVE-2023-4364230Monitor
Missing upper bound check on chunk length in snappy-java
HighCVSS 7.5No exploitEPSS 1%xerial · snappy-javaSep 25, 2023