CVE-2023-43642
HighAdvisory
Published 25 Sept 2023In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.010
- 62nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 155
- of 17,781 indexed, latest versions
- Container images
- 150
- deployed by those charts
- Fix available
- 1 of 1
- affected package
snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact
Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 150 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| snappy-javamaven | 1.0.3, 1.0.4.1, 1.0.5, 1.0.5.2+12 more | 1.1.10.4 | 150 |
- OSV records
- GHSA-55g7-9cwv-5qfv
Charts affected
155 by stars
Container images carrying it
150 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| jacobalberty/ | b3edc809a3ff | snappy-java | 1.1.10.4 | 1 |
| jingking/ | 43e74ab234e1 | snappy-java | 1.1.10.4 | 1 |
| library/ | cb079c0d7a57 | snappy-java | 1.1.10.4 | 1 |
| library/ | 17a4f64e9cf5 | snappy-java | 1.1.10.4 | 1 |
| library/ | d124efd81fbb | snappy-java | 1.1.10.4 | 1 |
| library/ | bd5d420506d6 | snappy-java | 1.1.10.4 | 1 |
| library/ | 4c8a6d3b2338 | snappy-java | 1.1.10.4 | 1 |
| library/ | 55d1e5b2e601 | snappy-java | 1.1.10.4 | 1 |
| lightbend/ | 0bedf37f428a | snappy-java | 1.1.10.4 | 1 |
| linuxserver/ | 0ae315a3a456 | snappy-java | 1.1.10.4 | 1 |
| linuxserver/ | ab105cc50322 | snappy-java | 1.1.10.4 | 1 |
| lourdesmorente/ | 608745878cdb | snappy-java | 1.1.10.4 | 1 |
| lsmaster/ | 061eb5fbfa00 | snappy-java | 1.1.10.4 | 1 |
| magento/ | 59fb6f0f1461 | snappy-java | 1.1.10.4 | 1 |
| molynx/ | 441c9f52f092 | snappy-java | 1.1.10.4 | 1 |
| omecproject/ | 28a90cc26716 | snappy-java | 1.1.10.4 | 1 |
| opencord/ | 4187e2a8c918 | snappy-java | 1.1.10.4 | 1 |
| opensearchproject/ | 43b0cdaf26ed | snappy-java | 1.1.10.4 | 1 |
| opensearchproject/ | c8f3ebd2a934 | snappy-java | 1.1.10.4 | 1 |
| pcarrascoponce/ | 981fc482442c | snappy-java | 1.1.10.4 | 1 |
| radarbase/ | 1d2af7dd5a4e | snappy-java | 1.1.10.4 | 1 |
| radondb/ | 16981604f1a0 | snappy-java | 1.1.10.4 | 1 |
| scorpiobroker/ | db55012043df | snappy-java | 1.1.10.4 | 1 |
| seataio/ | 703b5de7f1a6 | snappy-java | 1.1.10.4 | 1 |
| slamdev/ | b4b029c9b15f | snappy-java | 1.1.10.4 | 1 |
| sslhep/ | 9e80af083079 | snappy-java | 1.1.10.4 | 1 |
| thingsboard/ | bd45a09d85d9 | snappy-java | 1.1.10.4 | 1 |
| thingsboard/ | a06f53c5e2da | snappy-java | 1.1.10.4 | 1 |
| thingsboard/ | 030f316ce301 | snappy-java | 1.1.10.4 | 1 |
| thingsboard/ | 645f43b688f7 | snappy-java | 1.1.10.4 | 1 |
| thingsboard/ | f40a542832c4 | snappy-java | 1.1.10.4 | 1 |
| thmmniii/ | 5438517d9fc2 | snappy-java | 1.1.10.4 | 1 |
| trinodb/ | 38c6f24ab1a4 | snappy-java | 1.1.10.4 | 1 |
| trinodb/ | ee80ab5eeab2 | snappy-java | 1.1.10.4 | 1 |
| vitalii1992/ | 8e798836ecea | snappy-java | 1.1.10.4 | 1 |
| vitalii1992/ | 44d2d6e00ab3 | snappy-java | 1.1.10.4 | 1 |
| vlebediantsev/ | df8bf38c535b | snappy-java | 1.1.10.4 | 1 |
| vlebediantsev/ | 427af418b75e | snappy-java | 1.1.10.4 | 1 |
| vlebediantsev/ | 9319437f3c8f | snappy-java | 1.1.10.4 | 1 |
| wistefan/ | e0887302b2d8 | snappy-java | 1.1.10.4 | 1 |
| xeotek/ | 4c6b04d9ce55 | snappy-java | 1.1.10.4 | 1 |
| xetusoss/ | 88f25242b9ee | snappy-java | 1.1.10.4 | 1 |
| ghcr.io/ | 503c00321502 | snappy-java | 1.1.10.4 | 1 |
| ghcr.io/ | c144bdd688d7 | snappy-java | 1.1.10.4 | 1 |
| ghcr.io/ | ac62269785ac | snappy-java | 1.1.10.4 | 1 |
| ghcr.io/ | e949b0f733f0 | snappy-java | 1.1.10.4 | 1 |
| ghcr.io/ | 8368359c8dd0 | snappy-java | 1.1.10.4 | 1 |
| public.ecr.aws/ | 794b3bff9510 | snappy-java | 1.1.10.4 | 1 |
| quay.io/ | 93889c3d8a34 | snappy-java | 1.1.10.4 | 1 |
| quay.io/ | e9e03b31007c | snappy-java | 1.1.10.4 | 1 |