Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Ubuntu 22.04: Snowflake Important Denial of Service Advisories USN-7966-1

ubuntu
Calendar Grey January 19, 2026
Dist Ubuntu Esm H88
Several security issues in Snowflake on Ubuntu addressed. Update to avoid possible denial of service attacks.
Several security issues were fixed in Snowflake.

Summary

Several security issues were fixed in Snowflake.

Software Description:

- snowflake: Cloud-based data platform.

Details:

It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit

on the amount of data that was buffered during the handshake. An attacker could

possibly use the issue to cause a denial of service. (CVE-2022-29189)

It was discovered that Pion DTLS, vendored in Snowflake, did not prevent the

fragmentBuffer from processing zero length fragments. An attacker could

possibly use the issue to cause a denial of service. (CVE-2022-29190)

It was discovered that Pion DTLS, vendored in Snowflake, did not require

CertificateVerify when Client Cert was sent. An attacker could

possibly use the issue to cause a denial of service. (CVE-2022-29222)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important data platform snowflake

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
  snowflake-client                1.1.0-2ubuntu0.1+esm2
                                  Available with Ubuntu Pro
  snowflake-proxy                 1.1.0-2ubuntu0.1+esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7966-1

CVE-2022-29189, CVE-2022-29190, CVE-2022-29222

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7966-1

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important data platform snowflake

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here