Denial Of Service (DoS)

🗓️ 14 Aug 2023 03:44:29Reported by Veracode Vulnerability DatabaseType

gRPC Vulnerable to Denial of Service (DoS) due to file descriptor handlin

Reporter	Title	Published	Views	Family All 72
ibm	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to unwanted disconnects due to the gRPC package (CVE-2023-33953)	23 Jul 202513:33	–	ibm
ibm	Security Bulletin: IBM QRadar SIEM protocols are affected by denial of service.	15 Jul 202515:17	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in gRPC	27 Sep 202321:12	–	ibm
ibm	Security Bulletin: Vulnerability in gRPC affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	12 Mar 202517:03	–	ibm
ibm	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	5 Jun 202512:19	–	ibm
ibm	Security Bulletin: Mutiple Vulnerabilties Affecting IBM Watson Machine Learning Accelerator	18 Aug 202321:24	–	ibm
alpinelinux	CVE-2023-33953	9 Aug 202313:15	–	alpinelinux
broadcom	GridGain Security update in Brocade SANnav version 2.3.1a (CVE-2023-32732, CVE-2023-34462, CVE-2023-33953, CVE-2023-40167, CVE-2023-36479, CVE-2023-41900, CVE-2022-2048, CVE-2023-26048, CVE-2023-26049)	2 Nov 202400:00	–	broadcom
cbl_mariner	CVE-2023-33953 affecting package grpc for versions less than 1.62.0-2	17 Apr 202422:02	–	cbl_mariner
cbl_mariner	CVE-2023-33953 affecting package python-tensorboard for versions less than 2.11.0-2	18 Aug 202320:24	–	cbl_mariner

Vulners

Node

grpcio grpcioRange1.56.0rc2–1.56.0cpp

grpcio grpcioRange1.55.0rc1–1.55.0cpp

grpcio grpcioRange1.54.0rc1–1.54.2cpp

grpcio grpcioRange0.3.0–1.53.1cpp

grpc grpcRange1.56.0.pre3–1.56.0cpp

grpc grpcMatch1.55.0cpp

grpc grpcRange1.54.0–1.54.2cpp

grpc grpcRange0.5.0–1.53.1cpp

libgrpc.so libgrpc.soRange0.11.0.0–31.0.0cpp

grpc grpcMatch1.56.0cpp

grpc grpcRange1.54.0-pre2–1.54.0cpp

grpc grpcRange0.5.1–1.53.0cpp

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
cloud	www.cloud.google.com/support/bulletins
github	www.github.com/grpc/grpc/commit/1e86ca5834b94cae7d5e6d219056c0fc895cf95d
github	www.github.com/grpc/grpc/commit/f44cddbebae95935fa640aa19ed5d5786de2aafa
github	www.github.com/grpc/grpc/commit/baf725066734368d435ac7979e5ac9ee096ad834
github	www.github.com/grpc/grpc/commit/d4b53c70b9e0e083454ea0377e49fc8f223537bb
github	www.github.com/advisories/GHSA-496j-2rq6-j6cc

17 Aug 2023 17:08Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00412

SSVC