CVE-2025-46330 – Snowflake libsnowflakeclient HTTP Request Retry Denial of Service

April 29, 2025

CVE ID : CVE-2025-46330

Published : April 29, 2025, 5:15 a.m. | 1 hour, 40 minutes ago

Description : libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.

Severity: 3.3 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-46338 – Audiobookshelf Reflected Cross-Site Scripting (XSS) Vulnerability

Next Article CVE-2025-46329 – Snowflake libsnowflakeclient Sensitive Information Logging

Highlights

CVE-2025-47713 – Apache CloudStack Domain Admin Privilege Escalation Vulnerability

June 10, 2025

CVE ID : CVE-2025-47713

Published : June 10, 2025, 11:15 p.m. | 2 hours, 34 minutes ago

Description : A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password of user-accounts of Admin role type. This operation is not appropriately restricted and allows the attacker to assume control over higher-privileged user-accounts. A malicious Domain Admin attacker can impersonate an Admin user-account and gain access to sensitive APIs and resources that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of infrastructure managed by CloudStack.

Users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0, which fixes the issue with the following:
* Strict validation on Role Type hierarchy: the caller’s user-account role must be equal to or higher than the target user-account’s role.
* API privilege comparison: the caller must possess all privileges of the user they are operating on.
* Two new domain-level settings (restricted to the default Admin):
- role.types.allowed.for.operations.on.accounts.of.same.role.type: Defines which role types are allowed to act on users of the same role type. Default: “Admin, DomainAdmin, ResourceAdmin”.
– allow.operations.on.users.in.same.account: Allows/disallows user operations within the same account. Default: true.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 15 Enterprise Use Cases That Justify Hiring Node.js Developers in 2025

The Core Model: Start FROM The Answer, Not WITH The Solution

AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks, Veracode Research Reveals

Understanding the code modernization conundrum

Not just YouTube: Google is using AI to guess your age based on your activity – everywhere

Malicious extensions can use ChatGPT to steal your personal data – here’s how

What Zuckerberg’s ‘personal superintelligence’ sales pitch leaves out

This handy NordVPN tool flags scam calls on Android – even before you answer

Route Optimization through Laravel’s Shallow Resource Architecture

Route Optimization through Laravel’s Shallow Resource Architecture

This Week in Laravel: Laracon News, Free Laravel Idea, and Claude Code Course

Everything We Know About Pest 4

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

Windows 11’s MSN Widgets board now opens in default browser, such as Chrome (EU only)

Microsoft’s new “move to Windows 11” campaign implies buying OneDrive paid plan

CVE-2025-46330 – Snowflake libsnowflakeclient HTTP Request Retry Denial of Service

The hidden risks of browser extensions – and how to stay safe

Minnesota National Guard Deployed After Major Cyberattack on St. Paul City Systems

Precise Number Formatting with Laravel’s Enhanced Number::spell Method

CVE-2025-5541 – WordPress Runners Log Plugin Stored Cross-Site Scripting Vulnerability

TEAMGROUP PD20 Mini External SSD Review

CVE-2025-6858 – HDF5 Null Pointer Dereference Vulnerability

CVE-2025-47713 – Apache CloudStack Domain Admin Privilege Escalation Vulnerability

CVE-2025-6651 – PDF-XChange Editor JP2 File Parsing Remote Code Execution Vulnerability

CVE-2025-41418 – TB-eye Network Recorders/AHD Recorders Buffer Overflow Vulnerability

PowerToys, one of the best free apps on Windows 11, just got a major update

CVE-2025-46330 – Snowflake libsnowflakeclient HTTP Request Retry Denial of Service

Related Posts