CVE-2023-3635

MediumCVSS 5.9

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.08%

61th percentile - higher than 61% of all known CVEs

Summary

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive.

Risk Assessment

The organization may experience service outages related to the Okio client, which could impact users and business operations.

Recommendation

It is recommended to update to the latest version that improves exception handling in the GzipSource class to minimize the risk of denial of service.

Original NVD description (English source)

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.