CVE-2023-33953

🗓️ 09 Aug 2023 12:54:47Reported by GoogleType

gRPC vulnerability allows DOS attacks due to HPACK table accounting errors, leading to unbounded memory and CPU consumption

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to unwanted disconnects due to the gRPC package (CVE-2023-33953)	23 Jul 202513:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM protocols are affected by denial of service.	15 Jul 202515:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in gRPC	27 Sep 202321:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in gRPC affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	12 Mar 202517:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	5 Jun 202512:19	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting IBM Watson Machine Learning Accelerator	18 Aug 202321:24	–	ibm
AlpineLinux	CVE-2023-33953	9 Aug 202313:15	–	alpinelinux
Broadcom	GridGain Security update in Brocade SANnav version 2.3.1a (CVE-2023-32732, CVE-2023-34462, CVE-2023-33953, CVE-2023-40167, CVE-2023-36479, CVE-2023-41900, CVE-2022-2048, CVE-2023-26048, CVE-2023-26049)	2 Nov 202400:00	–	broadcom
CBLMariner	CVE-2023-33953 affecting package grpc for versions less than 1.62.0-2	17 Apr 202422:02	–	cbl_mariner
CBLMariner	CVE-2023-33953 affecting package python-tensorboard for versions less than 2.11.0-2	18 Aug 202320:24	–	cbl_mariner

NVD

Vulners

Vulnrichment

Node

grpc grpcRange<1.53.2-

grpc grpcRange1.54.0–1.54.3-

grpc grpcRange1.55.0–1.55.2-

grpc grpcRange1.56.0–1.56.2-

[
  {
    "defaultStatus": "unaffected",
    "product": "gRPC",
    "vendor": "Google",
    "versions": [
      {
        "lessThan": "1.56.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cloud	www.cloud.google.com/support/bulletins

21 Nov 2024 08:06Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00124

SSVC

grpc vulnerability dos attacks hpack memory buffering cpu consumption nvd