StackRadar

CVE-2023-43642

High

Advisory

Published 25 Sept 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
155
of 17,781 indexed, latest versions
Container images
150
deployed by those charts
Fix available
1 of 1
affected package

snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact

Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 150 images.

Affected packageAffected versionsFixed inImages
snappy-javamaven1.0.3, 1.0.4.1, 1.0.5, 1.0.5.2+12 more1.1.10.4150
OSV records
GHSA-55g7-9cwv-5qfv

Charts affected

155 by stars
ChartLatestAffected imagesRadar Score
clickhousetemp-charts0.7.11 of 3See more

clickhouse temp-charts 0.7.1

1 of the 3 container images this version deploys carry CVE-2023-43642.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
snappy-java@1.1.7
1.1.10.4

Open the chart page →

8,707
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2023-43642.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
snappy-java@1.1.8.4
1.1.10.4
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
snappy-java@1.1.8.4
1.1.10.4
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
snappy-java@1.1.8.4
1.1.10.4
thingsboard/tb-node:3.4.1645f43b688f7
snappy-java@1.1.8.4
1.1.10.4

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-43642.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
snappy-java@1.1.7.7
1.1.10.4

Open the chart page →

12,455
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2023-43642.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
snappy-java@1.1.8.1
1.1.10.4
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
snappy-java@1.1.10.1
1.1.10.4

Open the chart page →

9,397
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-43642.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
snappy-java@1.1.10.1
1.1.10.4

Open the chart page →

9,248

Container images carrying it

150 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hdfs:2.7.73b28784ba41f
snappy-java@1.0.4.1
1.1.10.4
7
wurstmeister/kafka:latest2d4bbf9cc83d
snappy-java@1.1.8.1
1.1.10.4
7
solsson/kafka:latest41e5d8f6f290
snappy-java@1.1.8.4
1.1.10.4
5
bde2020/hive:2.3.2-postgresql-metastore620267768985
snappy-java@1.0.4.1
1.1.10.4
4
gradiant/hbase-base:2.0.1a1ee6de94c04
snappy-java@1.0.5
1.1.10.4
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
snappy-java@1.1.10.1
1.1.10.4
4
mastercloudapps/planner:v1.2340a950b311b2
snappy-java@1.1.8.1
1.1.10.4
4
quay.io/strimzi/operator:0.37.052f376e64b9b
snappy-java@1.1.10.1
1.1.10.4
4
codeurjc/planner:v1.0800cf520c245
snappy-java@1.1.8.1
1.1.10.4
3
gchq/hdfs:3.3.35ec58edbb2db
snappy-java@1.1.8.2
1.1.10.4
3
library/solr:8.11.18c5f7881cebb
snappy-java@1.1.7.6
1.1.10.4
3
provectuslabs/kafka-ui:latest8f2ff02d64b0
snappy-java@1.1.10.0
1.1.10.4
3
signoz/zookeeper:3.7.1fcc4a3288154
snappy-java@1.1.7.7
1.1.10.4
3
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
snappy-java@1.1.10.1
1.1.10.4
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
snappy-java@1.1.10.1
1.1.10.4
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
snappy-java@1.1.10.1
1.1.10.4
2
danisla/hadoop:2.9.0255ba2dd739b
snappy-java@1.0.5
1.1.10.4
2
dina1993/airports-api:latestac731244aed1
snappy-java@1.1.8.4
1.1.10.4
2
dina1993/airports-consumer:latest669d146a5e63
snappy-java@1.1.8.4
1.1.10.4
2
dina1993/airports-producer:latest3d6b0dac1cb4
snappy-java@1.1.8.4
1.1.10.4
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
snappy-java@1.0.5
1.1.10.4
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
snappy-java@1.1.8.4
1.1.10.4
2
library/cassandra:4.1.37cbcec0086ac
snappy-java@1.1.10.1
1.1.10.4
2
library/zookeeper:3.6.180ad2170ad62
snappy-java@1.1.7
1.1.10.4
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
snappy-java@1.1.8.1
1.1.10.4
2
opensearchproject/opensearch:2.1.04254021a8c71
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
snappy-java@1.1.7.1
1.1.10.4
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
snappy-java@1.1.8.1
1.1.10.4
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
snappy-java@1.1.8.1
1.1.10.4
2
5200710/hadoop:3.2.3-java8092d3088a5fb
snappy-java@1.1.8.2
1.1.10.4
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
snappy-java@1.0.5
1.1.10.4
1
adagber/planner:v1.0e5c1ed097752
snappy-java@1.1.8.1
1.1.10.4
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
snappy-java@1.1.7.1
1.1.10.4
1
andrianrf/backoffice-be:latest6036614803d4
snappy-java@1.1.8.4
1.1.10.4
1
apache/drill:1.21.11f96558fd292
snappy-java@1.1.8.1
1.1.10.4
1
apache/druid:29.0.10cef139b6bf1
snappy-java@1.1.8.2
1.1.10.4
1
apache/hadoop:3af361b20bec0
snappy-java@1.1.8.2
1.1.10.4
1
apacheignite/ignite:2.7.0d7deab68b8fa
snappy-java@1.0.4.1
1.1.10.4
1
apache/iotdb:0.13.3-nodeafa47bf1692a
snappy-java@1.1.8.4
1.1.10.4
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
snappy-java@1.1.10.1
1.1.10.4
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
snappy-java@1.1.7
1.1.10.4
1
apachepulsar/pulsar:2.9.0d056c89b7131
snappy-java@1.1.7
1.1.10.4
1
apachepulsar/pulsar:2.8.2d538416d5afe
snappy-java@1.1.7
1.1.10.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.