Malicious code in otlp-grpc-exporter-base (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9676 Malicious code in js-rust-grpc-quotes (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9668 Malicious code in instrumentation-grpc (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: rust-tonic-0.12.3-1.fc41

A gRPC over HTTP/2 implementation focused on high performance, interoperability, and flexibility...

[SECURITY] Fedora 41 Update: rust-tonic-build-0.12.3-1.fc41

Codegen module of tonic gRPC implementation...

Important: Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements

Release of OpenShift Serverless Logic 1.34.0 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

K000141352: Multiple gRPC vulnerabilities

Security Advisory Description CVE-2020-7768 The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition. CVE-2017-9431 Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related...

Pomerium service account access token may grant unintended access to databroker API

Impact We've identified a vulnerability in the Pomerium databroker service API that may grant unintended access under specific conditions. This affects only certain Pomerium Zero and Pomerium Enterprise deployments. Who is affected? A Pomerium deployment is susceptible to this issue if all of the...

GHSA-R7RH-JWW5-5FJR Pomerium service account access token may grant unintended access to databroker API

Impact We've identified a vulnerability in the Pomerium databroker service API that may grant unintended access under specific conditions. This affects only certain Pomerium Zero and Pomerium Enterprise deployments. Who is affected? A Pomerium deployment is susceptible to this issue if all of the...

typedb-protocol (>=3.0.0-alpha-2, <=3.0.0-alpha-7) potentially affected by CVE-2024-47609 via tonic (0.12.2)

tonic CARGO version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tonic and may be impacted: - typedb-protocol =3.0.0-alpha-2, =3.0.0-alpha-7 Source cves: CVE-2024-47609 Source advisory: OSV:GHSA-4JWC-W2HC-78QV...

CVE-2024-47609

Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that...

CVE-2024-47609 Remotely exploitable DoS in Tonic `<=v0.12.2`

Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that...

CVE-2024-47609

CVE-2024-47609 affects the Tonic library (Rust gRPC) in versions prior to 0.12.3. The vulnerability is a remote DoS in the server side when using tonic::transport::Server: the accept loop can exit cleanly if the accept call errors in a way not properly covered, allowing a attacker-controlled TCP/...

CVE-2024-47609 Remotely exploitable DoS in Tonic `<=v0.12.2`

Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that...

CVE-2024-47609

Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that...

CVE-2024-47609 Remotely exploitable DoS in Tonic `<=v0.12.2`

Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that...

typedb-protocol (>=3.0.0-alpha-2, <=3.0.0-alpha-7) potentially affected by CVE-2024-47609 via tonic (0.12.2)

tonic CARGO version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tonic and may be impacted: - typedb-protocol =3.0.0-alpha-2, =3.0.0-alpha-7 Source cves: CVE-2024-47609 Source advisory: OSV:RUSTSEC-2024-0376...

Security Bulletin: Vulnerabilities in gRPC affect watsonx.data

Summary gRPC is vulnerable to a denial of service attack as well as possibly allowing a remote attack to obtain sensitive information. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2023-1428 DESCRIPTION: gRPC is vulnerable to a denial of service. By sending a specially crafted...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA)

An update for Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available RHBQ 3.8.6.GA. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. An update for Red Hat...

EulerOS 2.0 SP8 : grpc (EulerOS-SA-2024-2470)

According to the versions of the grpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a...