grpc-go:fuzz_helloserver: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5930640874799104 Project: grpc-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzhelloserver Job Type: libfuzzerasangrpc-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000034150897 Crash State: NULL Sanitizer: address ASAN Recommende...

grpc-go:fuzz_helloserver: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5203482091061248 Project: grpc-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzhelloserver Job Type: libfuzzerasangrpc-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

Information Disclosure

github.com/grpc/grpc-go is vulnerable to information disclosure. A context leak occurs when a stream is not successfully created, potentially disclosing confidential information contained within a context...

Denial Of Service (DoS) Via Settings Flood

github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. The attack can be triggered by sending a flood of settings by a HTTP/2 peer, leading to an excessive data queue and causing high CPU and resource consumption...

Denial Of Service (DoS)

github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. If an attacker tries to connect a GRPC client to an IP address and port number which has no listeners, the client continues to try and connect to this in an infinite loop. This is because the transportMonitor goroutine does n...

Denial Of Service (DoS)

github.com/andreimatei/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...

Denial Of Service (DoS)

github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...