AZL-34770 CVE-2023-33953 affecting package grpc for versions less than 1.62.0-2

🗓️ 09 Aug 2023 13:15:09Reported by GoogleType

osv🔗 osv.dev👁 1 Views

gRPC HPACK parser DOS below 1.62.0-2 from unbounded memory and CPU due to buffering and overflow.

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to unwanted disconnects due to the gRPC package (CVE-2023-33953)	23 Jul 202513:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM protocols are affected by denial of service.	15 Jul 202515:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in gRPC	27 Sep 202321:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in gRPC affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	12 Mar 202517:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	5 Jun 202512:19	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting IBM Watson Machine Learning Accelerator	18 Aug 202321:24	–	ibm
AlpineLinux	CVE-2023-33953	9 Aug 202313:15	–	alpinelinux
Broadcom	GridGain Security update in Brocade SANnav version 2.3.1a (CVE-2023-32732, CVE-2023-34462, CVE-2023-33953, CVE-2023-40167, CVE-2023-36479, CVE-2023-41900, CVE-2022-2048, CVE-2023-26048, CVE-2023-26049)	2 Nov 202400:00	–	broadcom
CBLMariner	CVE-2023-33953 affecting package grpc for versions less than 1.62.0-2	17 Apr 202422:02	–	cbl_mariner
CBLMariner	CVE-2023-33953 affecting package python-tensorboard for versions less than 2.11.0-2	18 Aug 202320:24	–	cbl_mariner