Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rubygemsRubySecRUBY:GRPC-2023-4785
HistorySep 12, 2023 - 9:00 p.m.

Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

2023-09-1221:00:00
RubySec
groups.google.com
10
grpc
tcp server
denial of service
posix-compatible
google
vulnerability
error handling
linux
c++
python
ruby
java
go

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

JSON

Lack of error handling in the TCP server in Google’s gRPC starting
version 1.23 on posix-compatible platforms (ex. Linux) allows an
attacker to cause a denial of service by initiating a significant
number of connections with the server.

Note that gRPC C++ Python, and Ruby are affected, but
gRPC Java and Go are NOT affected.

Affected configurations

Vulners
Node
rubygrpcRange1.53.0–1.53.2
OR
rubygrpcRange1.54.0–1.54.3
OR
rubygrpcRange1.55.0–1.55.3
OR
rubygrpcRange≤1.56.2
VendorProductVersionCPE
rubygrpc*cpe:2.3:a:ruby:grpc:*:*:*:*:*:*:*:*

Related

osv 3
nessus 10
openvas 9
veracode 1
redhatcve 1
ubuntucve 1
ibm 3
cve 1
wolfi 1
cbl_mariner 1
alpinelinux 1
nvd 1
cgr 1
cvelist 1
prion 1
debiancve 1
github 1
redhat 1
osv
osv
CVE-2023-4785
2023-09-13 17:15:10
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
2023-09-13 18:31:26
CGA-xfgf-qg5m-ffg9
2024-06-06 12:29:58
nessus
nessus
EulerOS 2.0 SP11 : grpc (EulerOS-SA-2023-3243)
2024-01-16 00:00:00
EulerOS 2.0 SP10 : grpc (EulerOS-SA-2023-3179)
2024-01-16 00:00:00
EulerOS 2.0 SP11 : grpc (EulerOS-SA-2023-3271)
2024-01-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for grpc (EulerOS-SA-2023-3243)
2023-12-12 00:00:00
Huawei EulerOS: Security Advisory for grpc (EulerOS-SA-2023-3214)
2023-11-10 00:00:00
Huawei EulerOS: Security Advisory for grpc (EulerOS-SA-2024-2032)
2024-07-22 00:00:00
veracode
veracode
Denial Of Service
2023-09-20 10:46:22
redhatcve
redhatcve
CVE-2023-4785
2023-09-15 09:51:43
ubuntucve
ubuntucve
CVE-2023-4785
2023-09-13 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to denial of service in Google gRPC [CVE-2023-4785]
2024-04-25 18:17:47
Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.13 and earlier
2023-10-12 19:11:49
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-03-27 20:12:33
cve
cve
CVE-2023-4785
2023-09-13 17:15:10
wolfi
wolfi
CVE-2023-4785 vulnerabilities
2024-09-18 21:11:55
cbl_mariner
cbl_mariner
CVE-2023-4785 affecting package grpc for versions less than 1.62.0-2
2024-04-17 22:02:46
alpinelinux
alpinelinux
CVE-2023-4785
2023-09-13 17:15:10
nvd
nvd
CVE-2023-4785
2023-09-13 17:15:10
cgr
cgr
CVE-2023-4785 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2023-4785 Denial of Service in gRPC Core
2023-09-13 16:31:55
prion
prion
Code injection
2023-09-13 17:15:00
debiancve
debiancve
CVE-2023-4785
2023-09-13 17:15:10
github
github
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
2023-09-13 18:31:26
redhat
redhat
(RHSA-2024:0797) Important: Satellite 6.14.2 Async Security Update
2024-02-13 14:38:17

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

JSON
Related for RUBY:GRPC-2023-4785
osv3nessus10openvas9veracode1redhatcve1ubuntucve1ibm3cve1wolfi1cbl_mariner1alpinelinux1nvd1cgr1cvelist1prion1debiancve1github1redhat1