PT-2023-4885

🗓️ 09 Jun 2023 00:00:00Reported by Positive TechnologiesType

gRPC C++ header handling can abort if specific headers push total size beyond eight kilobytes.

Reporter	Title	Published	Views	Family All 636
IBM Security Bulletins	Security Bulletin: Vulnerabilities in gRPC affect watsonx.data	25 Sep 202419:07	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions	19 Jun 202620:46	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVE-2026-2332)	16 Jun 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Jetty	3 Jun 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting IBM Watson Machine Learning Accelerator	18 Aug 202321:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in gRPC	27 Jul 202322:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-1605, CVE-2026-29063, CVE-2025-11143, CVE-2026-2332, CVE-2025-15599, CVE-2026-0540)	27 Apr 202615:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	28 Jul 202618:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by a HTTP Request/Response Smuggling Vulnerability in Eclipse Jetty (CVE-2026-2332)	19 Jun 202614:47	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CL03013.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59645
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59919
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-55851
github	www.github.com/grpc/grpc/commit/2485fa94bd8a723e5c977d55a3ce10b301b437f8
osv	www.osv.dev/vulnerability/CVE-2025-59250
osv	www.osv.dev/vulnerability/CVE-2026-12185
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-59250
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-6790
osv	www.osv.dev/vulnerability/CVE-2026-45292

18 Sep 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.8

CVSS 3.17.4 - 9.1

EPSS0.01305

SSVC