4 matches found
com.github.nbbrd.sdmx-dl:sdmx-dl-grpc (>=3.0.0-beta.12, <=3.0.0-beta.13), com.github.rebue.wheel:wheel-vertx (>=2.2.9, <=3.5.33) +242 more potentially affected by CVE-2024-8391 via io.vertx:vertx-grpc-client (>=4.3.0, <=4.5.9)
io.vertx:vertx-grpc-client MAVEN version =4.3.0, =3.0.0-beta.12, =2.2.9, =0.30.0, =0.21.0, =4.3.0-alpha.2, =4.3.0-alpha.2, =2.0.0-alpha.1, =1.0.0, =2.8.0, =0.2.0, =0.0.7, =0.0.7, =0.4.0, =0.0.7, =2.7.0.cr1, =3.14.0 and more Source cves: CVE-2024-8391 Source advisory:...
com.github.nbbrd.sdmx-dl:sdmx-dl-grpc (>=3.0.0-beta.12, <=3.0.0-beta.13), com.github.rebue.wheel:wheel-vertx (>=2.2.9, <=3.5.33) +242 more potentially affected by CVE-2024-8391 via io.vertx:vertx-grpc-client (>=4.3.0, <=4.5.9)
io.vertx:vertx-grpc-client MAVEN version =4.3.0, =3.0.0-beta.12, =2.2.9, =0.30.0, =0.21.0, =4.3.0-alpha.2, =4.3.0-alpha.2, =2.0.0-alpha.1, =1.0.0, =2.8.0, =0.2.0, =0.0.7, =0.0.7, =0.4.0, =0.0.7, =2.7.0.cr1, =3.14.0 and more Source cves: CVE-2024-8391 Source advisory:...
com.github.nbbrd.sdmx-dl:sdmx-dl-grpc (>=3.0.0-beta.12, <=3.0.0-beta.13), com.github.rebue.wheel:wheel-vertx (>=2.2.9, <=3.5.33) +242 more potentially affected by CVE-2024-8391 via io.vertx:vertx-grpc-client (>=4.3.0, <=4.5.9)
io.vertx:vertx-grpc-client MAVEN version =4.3.0, =3.0.0-beta.12, =2.2.9, =0.30.0, =0.21.0, =4.3.0-alpha.2, =4.3.0-alpha.2, =2.0.0-alpha.1, =1.0.0, =2.8.0, =0.2.0, =0.0.7, =0.0.7, =0.4.0, =0.0.7, =2.7.0.cr1, =3.14.0 and more Source cves: CVE-2024-8391 Source advisory:...
CVE-2024-8391: Allocation of Resources Without Limits or Throttling
In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client. This is fixed in the 4.5.10 version. Note this does not affect the Vert.x gRPC server based grpc-java and Netty...