Chrome OS 10820.0.0 dev-channel - app->VM via garcon TCP Command Socket

======================= BUG DESCRIPTION ======================= There is a variety of RPC communication channels between the Chrome OS host system and the crosvm guest. This bug report focuses on communication on TCP port 8889, which is used by the "garcon" service. Among other things, garcon is...

grpc/api_fuzzer: Crash in gpr_strdup

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5406804084260864 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff00000000 Crash...

Information Disclosure Through C Format String

grpc is vulnerable to information disclosure through a C Format String vulnerability. The vulnerability exists as the %s string format is not specified, potentially allowing other data to be read, and in some cases causes the application to crash...

grpc/api_fuzzer: Heap-use-after-free in gpr_mpscq_pop_and_check_end

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5118480400515072 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

Design/Logic Flaw

A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the emsd service stops. The vulnerability is due to the software's inability to...

CVE-2017-12270

A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the emsd service stops. The vulnerability is due to the software's inability to...

CVE-2017-12270

CVE-2017-12270 affects Cisco IOS XR Software on Cisco NCS 5500 Series Routers. The vulnerability lies in the gRPC code’s handling of HTTP/2 packets, specifically an inability to properly process malformed HTTP/2 frames, which can be exploited by an unauthenticated remote attacker to cause a denia...

Cisco IOS XR Software Denial of Service Vulnerability

A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the emsd service stops. The vulnerability is due to the software's inability to...

Out-of-bound Writes

gRPC is vulnerable to out-of-bound writes. The vulnerability exists because core/lib/iomgr/error.c causes an heap-based buffer overflow, leading to out-of-bounds writes. This vulnerability may lead to further attacks...

CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

Heap overflow

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

CVE-2017-9431

CVE-2017-9431 concerns Google gRPC before 2017-04-05, with an out-of-bounds write caused by a heap-based buffer overflow in core/lib/iomgr/error.c. Multiple connected sources (NVD entry and vendor advisories) confirm a heap-based write condition and indicate high impact potential, including the p...

CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

grpc: Global-buffer-overflow in grpc_chttp2_hptbl_add

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=6354411624333312 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

grpc: Global-buffer-overflow in grpc_chttp2_hptbl_add

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5659602282610688 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

grpc: Index-out-of-bounds in grpc_static_mdelem_for_static_strings

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=4857057310146560 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Index-out-of-bounds Crash...

Denial Of Service (DoS)

grpc is vulnerable to denial of service DoS attacks. The library contains a socket leak, meaning socket connections to the server are not closed even after the client side has been terminated. This can allow a malicious user to open multiple sockets to the server and cause it to run out of socket...