CVE-2017-3876

Cisco IOS XR DoS via Event Management Service daemon (emsd) due to improper handling of gRPC requests. Affected on all IOS XR platforms running release 6.1.1 with gRPC enabled (not enabled by default). An unauthenticated remote attacker can repeatedly send gRPC requests to crash the device, requi...

CVE-2017-3876: Undefined Security Weakness

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

Cisco IOS XR Software Denial of Service Vulnerability (cisco-sa-20170503-ios-xr)

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenc...

Google's OSS-Fuzz Finds 1,000 Open Source Bugs

The numbers are in, and judging by them, OSS-Fuzz, the program Google unveiled last December to continuously fuzz open source software, has been a success. In five months the effort has unearthed more than 1,000 bugs, a quarter of them potential security vulnerabilities, Google says. OSS-Fuzz,...

Cisco IOS XR Software Event Management Service gRPC Handling DoS (cisco-sa-20170503-ios-xr)

According to its self-reported version and configuration, the Cisco IOS XR software running on the remote device is affected by a denial of service vulnerability in the Event Management Service daemon emsd due to improper handling of gRPC requests. An unauthenticated, remote attacker can exploit...

Cisco IOS XR Software Denial of Service Vulnerability

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

Denial Of Service (DoS)

github.com/andreimatei/grpc-go is vulnerable to denial of service DoS attacks. If an attacker tries to connect a GRPC client to an IP address and port number which has no listeners, the client continues to try and connect to this in an infinite loop. This is because the transportMonitor goroutine...

Denial Of Service (DoS)

github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. If an attacker tries to connect a GRPC client to an IP address and port number which has no listeners, the client continues to try and connect to this in an infinite loop. This is because the transportMonitor goroutine does n...

Denial Of Service (DoS)

github.com/andreimatei/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...

Denial Of Service (DoS)

github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...

Denial Of Service (DoS) Via Out-of-Bounds Write

gRPC is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to a heap-based use-after-free UAF issue in the parseunix function. This vulnerability may lead to further attacks...

CVE-2017-8359

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

CVE-2017-8359

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

PYSEC-2017-101

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

DEBIAN-CVE-2017-8359

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

CVE-2017-8359

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

Heap overflow

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

CVE-2017-8359

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

CVE-2017-8359

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

CVE-2017-8359

CVE-2017-8359 affects Google gRPC prior to 2017-03-29, where an out-of-bounds write results from a heap-based use-after-free in the grpc_call_destroy function (core/lib/surface/call.c). The documents identify the root cause and the vulnerable component, but do not specify product versions beyond ...