CVE-2023-32732mediumCWE-440

CVE-2023-32732: falha de média gravidade em Google gRPC

Denial-of-Service in gRPC

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar gRPC+ Monitorar grpc

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.5%
gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit in  https://github.com/grpc/grpc/pull/32309 https://www.google.com/url
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Google · gRPC
CVEs relacionadas — Google gRPC

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4785HIGHDenial of Service in gRPC CoreEPSS 0.8%CVE-2023-32731HIGHInformation leak in gRPCEPSS 0.5%CVE-2023-33953HIGHDenial-of-Service in gRPCEPSS 0.5%CVE-2023-1428HIGHDenial-of-Service in gRPCEPSS 0.4%CVE-2024-7246MEDIUMHPACK table poisoning in gRPC C++, Python & RubyEPSS 0.2%