Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec

Impact Affected gRPC Swift servers are vulnerable to precondition failures when parsing certain gRPC Web requests. This may lead to a denial of service. Patches The problem has been fixed in 1.2.0. Workarounds No workaround is available. Users must upgrade...

GHSA-2JX2-QCM4-RF9H Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec

Impact Affected gRPC Swift servers are vulnerable to precondition failures when parsing certain gRPC Web requests. This may lead to a denial of service. Patches The problem has been fixed in 1.2.0. Workarounds No workaround is available. Users must upgrade...

PT-2021-21141 · Unknown · Grpc Swift

Name of the Vulnerable Software and Affected Versions: gRPC Swift versions 1.1.0 through 1.1.1 Description: The issue is related to mismanaged state in the GRPCWebToHTTP2ServerCodec.swift file, allowing remote attackers to cause a denial of service by sending malformed requests. Affected gRPC Swi...

grpc-swift:grpc-swift-fuzz-debug: Invalid-free in GRPC.GRPCWebToHTTP2ServerCodec.StateMachine.

Project: https://github.com/grpc/grpc-swift.git Detailed Report: https://oss-fuzz.com/testcase?key=4645975625957376 Project: grpc-swift Fuzzing Engine: libFuzzer Fuzz Target: grpc-swift-fuzz-debug Job Type: libfuzzerasangrpc-swift Platform Id: linux Crash Type: Invalid-free Crash Address:...