Most recent entries from all

bdu:2023-05360

BELL-CVE-2023-32731

Affected: Alpaquita:23: grpc

BREW-dstack-CVE-2023-32731 — Connection confusion in gRPC

Affected: Homebrew: dstack

When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration.

certfr-2023-avi-1007 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2023-avi-1007

EUVD-2026-189169

fkie_cve-2023-32731

GHSA-cfgp-2977-2fmm — Connection confusion in gRPC

Affected: Maven: io.grpc:grpc-protobuf, PyPI: grpcio, RubyGems: grpc

gsd-2023-32731

msrc_CVE-2023-32731 — Information leak in gRPC

msrc_CVE-2023-32731

openSUSE-SU-2024:13621-1 — grpc-devel-1.60.0-3.1 on GA media

grpc-devel-1.60.0-3.1 on GA media

PYSEC-2026-1427 — Connection confusion in gRPC

Affected: PyPI: grpcio

RHSA-2024:10761 — Red Hat Security Advisory: rhc-worker-playbook security update

python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli gRPC: Reachable Assertion gRPC: sensitive information disclosure gRPC: hpack table accounting errors can lead to denial of service

UBUNTU-CVE-2023-32731

Affected: Ubuntu:16.04:LTS: grpc, Ubuntu:18.04:LTS: grpc, Ubuntu:20.04:LTS: grpc, Ubuntu:22.04:LTS: grpc, Ubuntu:24.04:LTS: grpc, Ubuntu:25.10: grpc, Ubuntu:26.04:LTS: grpc

VDE-2024-073 — Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware

Gvariant offset table entry size is not checked in is_normal() G_variant_byteswap() can take a long time with some non-normal inputs Gvariant deserialisation does not match spec for non-normal data Glibc: dos due to memory leak in getaddrinfo.c Glibc: buffer overflow in ld.so leading to privilege escalation Gnutls: incomplete fix for cve-2023-5981 Gnutls: rejects certificate chain with distributed trust Denial-of-Service in gRPC Information leak in gRPC Denial-of-Service in gRPC Denial of Service in gRPC Core Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed) Incorrect cipher key & IV length processing POLY1305 MAC implementation corrupts XMM registers on Windows Excessive time spent checking DH q parameter value SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow NULL Pointer Dereference in vim/vim Heap-based Buffer Overflow in vim/vim Use After Free in vim/vim Heap-based Buffer Overflow in vim/vim Integer Overflow or Wraparound in vim/vim Use After Free in vim/vim Untrusted Search Path in vim/vim Out-of-bounds Write in vim/vim Use After Free in vim/vim Heap-based Buffer Overflow in vim/vim Use After Free in vim/vim Heap-based Buffer Overflow in vim/vim Use-After-Free in win_close() in vim overflow in shift_line in vim Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite Integer Overflow in :history command in Vim