Vulnerabilities > CVE-2025-46330 - Improper Following of Specification by Caller vulnerability in Snowflake Connector for C/C++

CVSS 3.3 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

local

low complexity

snowflake

CWE-573

NVD

Published: 2025-04-29

Updated: 2025-05-09

Summary

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.

Vulnerable Configurations

Part	Description	Count
Application	Snowflake Snowflake Connector FOR C/C++ 0.5.0 Snowflake Connector FOR C/C++ 0.5.1 Snowflake Connector FOR C/C++ 0.5.3 Snowflake Connector FOR C/C++ 0.5.5 Snowflake Connector FOR C/C++ 0.5.6 Snowflake Connector FOR C/C++ 0.5.7 Snowflake Connector FOR C/C++ 0.5.8 Snowflake Connector FOR C/C++ 0.5.9 Snowflake Connector FOR C/C++ 0.5.10 Snowflake Connector FOR C/C++ 0.5.11 Snowflake Connector FOR C/C++ 0.5.12 Snowflake Connector FOR C/C++ 0.5.13 Snowflake Connector FOR C/C++ 0.6.1 Snowflake Connector FOR C/C++ 0.6.2 Snowflake Connector FOR C/C++ 0.6.3 Snowflake Connector FOR C/C++ 0.6.4 Snowflake Connector FOR C/C++ 0.6.5 Snowflake Connector FOR C/C++ 0.6.6 Snowflake Connector FOR C/C++ 0.6.7 Snowflake Connector FOR C/C++ 0.6.9 Snowflake Connector FOR C/C++ 0.6.10 Snowflake Connector FOR C/C++ 0.6.11 Snowflake Connector FOR C/C++ 0.6.12 Snowflake Connector FOR C/C++ 0.6.13 Snowflake Connector FOR C/C++ 0.6.14 Snowflake Connector FOR C/C++ 0.6.15 Snowflake Connector FOR C/C++ 0.6.16 Snowflake Connector FOR C/C++ 0.6.17 Snowflake Connector FOR C/C++ 0.6.18 Snowflake Connector FOR C/C++ 0.6.19 Snowflake Connector FOR C/C++ 0.6.20 Snowflake Connector FOR C/C++ 0.68 Snowflake Connector FOR C/C++ 1.0.0 Snowflake Connector FOR C/C++ 1.0.1 Snowflake Connector FOR C/C++ 1.0.2 Snowflake Connector FOR C/C++ 1.0.3 Snowflake Connector FOR C/C++ 1.0.4 Snowflake Connector FOR C/C++ 1.0.5 Snowflake Connector FOR C/C++ 1.0.6 Snowflake Connector FOR C/C++ 1.0.7 Snowflake Connector FOR C/C++ 1.0.8 Snowflake Connector FOR C/C++ 1.0.9 Snowflake Connector FOR C/C++ 1.0.10 Snowflake Connector FOR C/C++ 1.0.11 Snowflake Connector FOR C/C++ 1.0.12 Snowflake Connector FOR C/C++ 1.0.13 Snowflake Connector FOR C/C++ 1.1.0 Snowflake Connector FOR C/C++ 1.1.1 Snowflake Connector FOR C/C++ 1.03 Snowflake Connector FOR C/C++ 2.0.0 Snowflake Connector FOR C/C++ 2.1.0	51

Common Weakness Enumeration (CWE)

CWE-573 - Improper Following of Specification by Caller

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References