The vulnerability of Google GRPC’s remote procedure call system lies in insufficient input validation and improper implementation of functions, allowing attackers to trigger service failures.

🗓️ 08 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Google GRPC calls have input validation flaws and weak functions, enabling remote service failures.

Reporter	Title	Published	Views	Family All 60
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM protocols are affected by denial of service.	15 Jul 202515:17	–	ibm
IBM Security Bulletins	Security Bulletin: gRPC HTTP/2 HPACK Desynchronization Vulnerability Allowing Header Leakage and Privilege Escalation, affects watsonx.data	4 Dec 202508:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2023-32731 CVE-2023-32732)	21 Nov 202512:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	5 Jun 202512:19	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting IBM Watson Machine Learning Accelerator	18 Aug 202321:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in gRPC	27 Jul 202322:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.11 and earlier	20 Jun 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2023	1 Sep 202319:56	–	ibm
Tenable Nessus	Amazon Linux 2023 : grpc, grpc-cpp, grpc-data (ALAS2023-2023-282)	14 Aug 202300:00	–	nessus
Tenable Nessus	Fedora 38 : grpc (2023-15b3e80753)	23 Jul 202300:00	–	nessus

Vulners

Node

wazuh,wazuhMatch4.4.5

OR

google grpcRange<1.53.0

OR

fedora fedoraMatch37

OR

fedora fedoraMatch38

Source	Link
github	www.github.com/grpc/grpc/pull/32309
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VWE44J5FG7THHL7XVEVTNIGEYBNKJBLL/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/37IDNVY5AWVH7JDMM2SDTL24ZPPZJNSY/
vuldb	www.vuldb.com/
web	www.web.nvd.nist.gov/view/vuln/detail

08 Sep 2023 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25

CVSS 35.3

EPSS0.00531

Google remote procedure input validation flaws weak function implementation remote service failures remote attackers