Heap overflow

Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parseunix function in core/ext/clientchannel/parseaddress.c...

Design/Logic Flaw

Google gRPC before 2017-02-22 has an out-of-bounds write related to the gprfree function in core/lib/support/alloc.c...

CVE-2017-7861

Google gRPC before 2017-02-22 has an out-of-bounds write related to the gprfree function in core/lib/support/alloc.c...

CVE-2017-7860

Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parseunix function in core/ext/clientchannel/parseaddress.c...

CVE-2017-7860

Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parseunix function in core/ext/clientchannel/parseaddress.c...

CVE-2017-7861

Google gRPC before 2017-02-22 has an out-of-bounds write related to the gprfree function in core/lib/support/alloc.c...

CVE-2017-7860

CVE-2017-7860 : Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow in parse_unix (core/ext/client_channel/parse_address.c). Connected sources describe it as a heap-based overflow that could impact availability, integrity, and confidentiality (NVD CVSS3...

CVE-2017-7861

Google gRPC before 2017-02-22 contains an out-of-bounds write in gpr_free (core/lib/support/alloc.c). Affected component is the gRPC core library; vulnerability arises from an out-of-bounds write in gpr_free. CVSS indicates high/critical impact with potential for crash or code execution depending...

CVE-2017-7861

Google gRPC before 2017-02-22 has an out-of-bounds write related to the gprfree function in core/lib/support/alloc.c...

CVE-2017-7860

Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parseunix function in core/ext/clientchannel/parseaddress.c...

Memory corruption

A vulnerability in Google-defined remote procedure call gRPC handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash due to a system memory leak, resulting in a denial of service DoS condition. This vulnerability...

CVE-2017-6599

A vulnerability in Google-defined remote procedure call gRPC handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash due to a system memory leak, resulting in a denial of service DoS condition. This vulnerability...

CVE-2017-6599

Cisco IOS XR Software vulnerability CVE-2017-6599 affects systems with gRPC enabled, where improper handling of gRPC requests can cause the Event Management Service daemon (emsd) to crash due to a memory leak, leading to a denial of service. Affected releases include 6.1.1.BASE and 6.2.1.BASE; fi...

CVE-2017-6599

A vulnerability in Google-defined remote procedure call gRPC handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash due to a system memory leak, resulting in a denial of service DoS condition. This vulnerability...

grpc: Heap-buffer-overflow in internal_add_error

Detailed report: https://oss-fuzz.com/testcase?key=6312731374256128 Project: grpc Fuzzer: aflgrpcserverfuzzer Fuzz target binary: serverfuzzer Job Type: aflasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x616000000a48 Crash State: internaladderror...

Cisco IOS XR Software Denial of Service Vulnerability

A vulnerability in Google-defined remote procedure call gRPC handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash due to a system memory leak, resulting in a denial of service DoS condition. The vulnerability ...

grpc: Heap-buffer-overflow in grpc_base64_decode

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5595941564317696 Project: grpc Fuzzer: libFuzzergrpcserverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x608000000172 Crash State:...

grpc: Heap-buffer-overflow in server_filter_incoming_metadata

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5417405008314368 Project: grpc Fuzzer: libFuzzergrpcserverfuzzer Fuzz target binary: serverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

grpc: Heap-use-after-free in post_batch_completion

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5965570207907840 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

grpc: Heap-use-after-free in grpc_call_destroy

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5414767311192064 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...