CVE-2024-27101 Integer overflow in chunking helper causes dispatching to miss elements or panic

2024-03-0121:01:39

CWE-190

GitHub_M

www.cve.org

cve-2024-27101

spicedb

integer overflow

chunking helper

dispatching

panic

security-critical

permissions

database

google zanzibar-inspired

cluster

schema

relationships

checkpermission

bulkcheckpermission

lookupsubjects

vulnerability

fixed.

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with any schema where a resource being checked has more than 65535 relationships for the same resource and subject type is affected by this problem. The CheckPermission, BulkCheckPermission, and LookupSubjects API methods are affected. This vulnerability is fixed in 1.29.2.

CNA Affected

[
  {
    "vendor": "authzed",
    "product": "spicedb",
    "versions": [
      {
        "version": "< 1.29.2",
        "status": "affected"
      }
    ]
  }
]