Most recent entries from all

bdu:2023-05376

BELL-CVE-2023-1428

Affected: Alpaquita:23: grpc

BREW-dstack-CVE-2023-1428 — gRPC Reachable Assertion issue

Affected: Homebrew: dstack

There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2:

te: x (x != trailers)

:scheme: x (x != http, https)

grpclb_client_stats: x (x == anything)

On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.

certfr-2024-avi-0297 — De multiples vulnérabilités ont été découvertes dans Juniper. Certaines d'entre elles permettent à un attaquant de prov…

certfr-2024-avi-0297

Withdrawn: CLEANSTART-2026-CL03013 — Netty is an asynchronous, event-driven network application framework

Withdrawn by the publisher.

Affected: CleanStart: apache-hive

Multiple security vulnerabilities affect the apache-hive package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details.

EUVD-2026-189159

fkie_cve-2023-1428

There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2:

te: x (x != trailers)

:scheme: x (x != http, https)

grpclb_client_stats: x (x == anything)

GHSA-6628-q6j9-w8vg — gRPC Reachable Assertion issue

Affected: Maven: io.grpc:grpc-protobuf, PyPI: grpcio, RubyGems: grpc

There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2:

te: x (x != trailers)

:scheme: x (x != http, https)

grpclb_client_stats: x (x == anything)

gsd-2023-1428

PYSEC-2026-1425 — gRPC Reachable Assertion issue

Affected: PyPI: grpcio

There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2:

te: x (x != trailers)

:scheme: x (x != http, https)

grpclb_client_stats: x (x == anything)

RHSA-2024:10761 — Red Hat Security Advisory: rhc-worker-playbook security update

python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli gRPC: Reachable Assertion gRPC: sensitive information disclosure gRPC: hpack table accounting errors can lead to denial of service

UBUNTU-CVE-2023-1428

Affected: Ubuntu:16.04:LTS: grpc, Ubuntu:18.04:LTS: grpc, Ubuntu:20.04:LTS: grpc, Ubuntu:22.04:LTS: grpc, Ubuntu:24.04:LTS: grpc, Ubuntu:25.10: grpc, Ubuntu:26.04:LTS: grpc

There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x != trailers) :scheme: x (x != http, https) grpclb_client_stats: x (x == anything) On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.