CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

grpc: Global-buffer-overflow in grpc_chttp2_hptbl_add

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=6354411624333312 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

grpc: Global-buffer-overflow in grpc_chttp2_hptbl_add

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5659602282610688 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

grpc: Index-out-of-bounds in grpc_static_mdelem_for_static_strings

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=4857057310146560 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Index-out-of-bounds Crash...

Denial Of Service (DoS)

grpc is vulnerable to denial of service DoS attacks. The library contains a socket leak, meaning socket connections to the server are not closed even after the client side has been terminated. This can allow a malicious user to open multiple sockets to the server and cause it to run out of socket...

CVE-2017-3876

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

Design/Logic Flaw

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

CVE-2017-3876

Cisco IOS XR DoS via Event Management Service daemon (emsd) due to improper handling of gRPC requests. Affected on all IOS XR platforms running release 6.1.1 with gRPC enabled (not enabled by default). An unauthenticated remote attacker can repeatedly send gRPC requests to crash the device, requi...

CVE-2017-3876

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

Cisco IOS XR Software Denial of Service Vulnerability (cisco-sa-20170503-ios-xr)

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenc...

Google's OSS-Fuzz Finds 1,000 Open Source Bugs

The numbers are in, and judging by them, OSS-Fuzz, the program Google unveiled last December to continuously fuzz open source software, has been a success. In five months the effort has unearthed more than 1,000 bugs, a quarter of them potential security vulnerabilities, Google says. OSS-Fuzz,...

Cisco IOS XR Software Event Management Service gRPC Handling DoS (cisco-sa-20170503-ios-xr)

According to its self-reported version and configuration, the Cisco IOS XR software running on the remote device is affected by a denial of service vulnerability in the Event Management Service daemon emsd due to improper handling of gRPC requests. An unauthenticated, remote attacker can exploit...

Cisco IOS XR Software Denial of Service Vulnerability

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

Denial Of Service (DoS)

github.com/andreimatei/grpc-go is vulnerable to denial of service DoS attacks. If an attacker tries to connect a GRPC client to an IP address and port number which has no listeners, the client continues to try and connect to this in an infinite loop. This is because the transportMonitor goroutine...

Denial Of Service (DoS)

github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. If an attacker tries to connect a GRPC client to an IP address and port number which has no listeners, the client continues to try and connect to this in an infinite loop. This is because the transportMonitor goroutine does n...

Denial Of Service (DoS)

github.com/andreimatei/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...

Denial Of Service (DoS)

github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...

Denial Of Service (DoS) Via Out-of-Bounds Write

gRPC is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to a heap-based use-after-free UAF issue in the parseunix function. This vulnerability may lead to further attacks...

Heap overflow

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...