CVE-2023-32732

2023-06-0911:15:09

Google

osv.dev

grpc

vulnerability

termination

connection

http2

proxy

server

upgrade

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for -bin suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit in https://github.com/grpc/grpc/pull/32309 https://www.google.com/url

CPENameOperatorVersion
grpceqobjective-c-v1.0.0-pre1
grpceq1.1.1
grpceq1.29.1
grpceq1.16.1-pre1
grpceq1.30.0
grpceq1.18.0
grpceq1.42.0-de
grpceq1.4.1
grpceq1.19.0-pre1
grpceq1.20.0-pre1

Name	Operator	Version
grpc	eq	objective-c-v1.0.0-pre1
grpc	eq	1.1.1
grpc	eq	1.29.1
grpc	eq	1.16.1-pre1
grpc	eq	1.30.0
grpc	eq	1.18.0
grpc	eq	1.42.0-de
grpc	eq	1.4.1
grpc	eq	1.19.0-pre1
grpc	eq	1.20.0-pre1