PT-2026-22301 · Snowflake · Snowflake-Jdbc

Fushuling · Publicado 2026-02-27 · Atualizado 2026-02-27 · CVE-2026-3293

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions snowflakedb snowflake-jdbc versions up to 4.0.1

Description A weakness exists in the SdkProxyRoutePlanner function within the JDBC URL Handler component of snowflakedb snowflake-jdbc. Manipulation of the nonProxyHosts argument can lead to inefficient regular expression complexity. This issue is locally exploitable and the exploit has been publicly released. The vulnerable code is located in the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java.

Recommendations Apply patch 5fb0a8a318a2ed87f4022a1f56e742424ba94052.

Exploit

Correção

Resource Exhaustion

DoS

Enumeração de Fraquezas

CWE-400

CWE-1333

Identificadores relacionados

CVE-2026-3293

GHSA-GX6C-PV62-9MCF

Produtos afetados

Snowflake-Jdbc

Referências · 15

• 🔥 https://github.com/snowflakedb/snowflake-jdbc/issues/2505#issue-3951994646 · Exploit
• https://github.com/snowflakedb/snowflake-jdbc/issues/2505 · Aviso do Fabricante
• https://github.com/snowflakedb/snowflake-jdbc/commit/5fb0a8a318a2ed87f4022a1f56e742424ba94052 · Correção
• https://github.com/snowflakedb/snowflake-jdbc · Nota
• https://snowflakecomputing.atlassian.net/browse/SNOW-3104251 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-3293 · Nota de Segurança
• https://t.me/CVEtracker/45940 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2027459343575081006 · Publicação no Twitter
• https://vuldb.com/?submit.760428 · Nota
• https://twitter.com/CVEnew/status/2027380194491634166 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-3293 · Aviso do Fabricante
• https://vuldb.com/?id.348035 · Nota
• https://t.me/cveNotify/153428 · Publicação no Telegram
• https://vuldb.com/?ctiid.348035 · Nota
• https://osv.dev/vulnerability/GHSA-gx6c-pv62-9mcf · Aviso do Fabricante