2311 matches found
grpc: Index-out-of-bounds in grpc_static_mdelem_for_static_strings
Detailed report: https://oss-fuzz.com/testcase?key=4857057310146560 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
Denial Of Service (DoS)
grpc is vulnerable to denial of service DoS attacks. The library contains a socket leak, meaning socket connections to the server are not closed even after the client side has been terminated. This can allow a malicious user to open multiple sockets to the server and cause it to run out of socket...
Design/Logic Flaw
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...
CVE-2017-3876
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...
CVE-2017-3876
Cisco IOS XR DoS via Event Management Service daemon (emsd) due to improper handling of gRPC requests. Affected on all IOS XR platforms running release 6.1.1 with gRPC enabled (not enabled by default). An unauthenticated remote attacker can repeatedly send gRPC requests to crash the device, requi...
CVE-2017-3876
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...
CVE-2017-3876: Undefined Security Weakness
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...
Cisco IOS XR Software Denial of Service Vulnerability (cisco-sa-20170503-ios-xr)
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenc...
Google's OSS-Fuzz Finds 1,000 Open Source Bugs
The numbers are in, and judging by them, OSS-Fuzz, the program Google unveiled last December to continuously fuzz open source software, has been a success. In five months the effort has unearthed more than 1,000 bugs, a quarter of them potential security vulnerabilities, Google says. OSS-Fuzz,...
Cisco IOS XR Software Event Management Service gRPC Handling DoS (cisco-sa-20170503-ios-xr)
According to its self-reported version and configuration, the Cisco IOS XR software running on the remote device is affected by a denial of service vulnerability in the Event Management Service daemon emsd due to improper handling of gRPC requests. An unauthenticated, remote attacker can exploit...
Cisco IOS XR Software Denial of Service Vulnerability
A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...
Denial Of Service (DoS)
github.com/andreimatei/grpc-go is vulnerable to denial of service DoS attacks. If an attacker tries to connect a GRPC client to an IP address and port number which has no listeners, the client continues to try and connect to this in an infinite loop. This is because the transportMonitor goroutine...
Denial Of Service (DoS)
github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. If an attacker tries to connect a GRPC client to an IP address and port number which has no listeners, the client continues to try and connect to this in an infinite loop. This is because the transportMonitor goroutine does n...
Denial Of Service (DoS)
github.com/andreimatei/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...
Denial Of Service (DoS)
github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. A malicious user can send an empty hpack string to the system and cause it to crash...
PT-2017-2361
Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.1.1 Description The issue is related to errors in resource management in the Event Management Service of Cisco IOS XR routers. It can be exploited by a remote, unauthenticated attacker to cause a denial of service...
Denial Of Service (DoS) Via Out-of-Bounds Write
gRPC is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to a heap-based use-after-free UAF issue in the parseunix function. This vulnerability may lead to further attacks...
CVE-2017-8359
Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...
