The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-ffiUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_katelloUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-domain_nameUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-multi_jsonUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-powerbarUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-jwtUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debuginfoUpgrade rubygem-oauthUpgrade rubygem-loggingUpgrade rubygem-gssapiUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cliUpgrade foreman-cliUpgrade rubygem-unfUpgrade rubygem-localeUpgrade satellite-cloneUpgrade rubygem-highlineUpgrade rubygem-unicode-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hashieUpgrade rubygem-little-pluggerUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_remote_execution | Nov 17, 2022 | Oct 19, 2021 |
| Debian | — | Upgrade netty | Jan 13, 2023 | Oct 19, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 9, 2021 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade rubygem-mime-types-dataUpgrade rubygem-clampUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade rubygem-localeUpgrade rubygem-oauthUpgrade rubygem-foreman_maintainUpgrade rubygem-highlineUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-jwtUpgrade rubygem-hashieUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffi-debuginfoUpgrade rubygem-gssapiUpgrade rubygem-fast_gettextUpgrade rubygem-little-pluggerUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-http-cookieUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicodeUpgrade rubygem-unicode-debugsourceUpgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-domain_nameUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cliUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_openscap | Nov 17, 2022 | Oct 19, 2021 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfo | Mar 12, 2024 | Oct 19, 2021 |
| Suse | — | Upgrade nettyUpgrade netty-pomsUpgrade netty-javadoc | Oct 26, 2022 | Oct 19, 2021 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade libnetty-java | May 1, 2023 | Oct 19, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub