Lucene search

K
githubGitHub Advisory DatabaseGHSA-4RHQ-VQ24-88GW
HistoryMay 22, 2023 - 8:29 p.m.

Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec

2023-05-2220:29:44
CWE-674
GitHub Advisory Database
github.com
7

0.005 Low

EPSS

Percentile

77.4%

Impact

Affected gRPC Swift servers are vulnerable to uncontrolled recursion and stack consumption when parsing certain payloads. This may lead to a denial of service.

Patches

The problem has been fixed in 1.2.0.

Workarounds

No workaround is available. Users must upgrade.

CPENameOperatorVersion
github.com/grpc/grpc-swiftlt1.2.0

0.005 Low

EPSS

Percentile

77.4%

Related for GHSA-4RHQ-VQ24-88GW