LOW🇵🇱 Wersja polska

CVE-2025-46330

CVSS 3.3v3.1pub. 2025-04-29upd. 2025-05-09

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

  • Snowflake Connector For C\/c\+\+

    APP
    Snowflake
    0.5.0 – 2.2.0 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-46329LOW3.3same product

libsnowflakeclient to Snowflake Connector dla C/C++. Wersje od 0.5.0 do przed 2.2.0 są podatne na lokalne logo...

CVE-2026-13749HIGH8.8PL ✓same vendor

RCE w Snowflake CLI — wstrzyknięcie kodu przez szablon Snowpark

CVE-2026-13744HIGH8.3PL ✓same vendor

SQL Injection w Snowflake CLI — niezamierzone wykonanie SQL przez złośliwe dane wejściowe

CVE-2025-24789HIGH7.8same vendor

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connec...

CVE-2025-24793HIGH7.0same vendor

The Snowflake Connector for Python provides an interface for developing Python applications that can connect t...