Skip to content
Threat Feed
Subscribe

Tag

Compression

2 briefs RSS
medium advisory

Snappier SnappyStream Decompression Infinite Loop Vulnerability

Snappier versions 1.3.0 and earlier are vulnerable to a denial-of-service condition where a malformed Snappy stream input to `SnappyStream` decompression causes an infinite loop, consuming a thread until the process is terminated.

Snappier denial-of-service compression infinite-loop
2r 1t
high advisory

NATS Server Panic via Malicious Compression on Leafnode Port

A vulnerability exists in NATS servers configured to accept leafnode connections where a malicious remote NATS server can trigger a server panic by exploiting compression negotiation on the leafnode port.

NATS server nats denial-of-service compression
2r 2t 1i