CVE-2023-32731
09.06.2023, 11:15
When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration. We recommend upgrading beyond the commit contained in https://github.com/grpc/grpc/pull/33005 https://github.com/grpc/grpc/pull/33005Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| grpc | grpc | 1.53.0 ≤ 𝑥 < 1.55.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| grpc | grpc | 1.53 ≤ 𝑥 ≤ 1.54 | ADP |
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| abseil-cpp-devel |
| ||||||||||||||||||||
| grpc-devel |
| ||||||||||||||||||||
| libabsl2308_0_0 |
| ||||||||||||||||||||
| libgrpc++1_60 |
| ||||||||||||||||||||
| libgrpc1_60 |
| ||||||||||||||||||||
| libgrpc37 |
| ||||||||||||||||||||
| libprotobuf-lite25_1_0 |
| ||||||||||||||||||||
| libprotobuf25_1_0 |
| ||||||||||||||||||||
| libprotoc25_1_0 |
| ||||||||||||||||||||
| libre2-11-20240201 |
| ||||||||||||||||||||
| libupb37 |
| ||||||||||||||||||||
| protobuf-devel |
| ||||||||||||||||||||
| python311-abseil |
| ||||||||||||||||||||
| python311-grpcio |
| ||||||||||||||||||||
| python311-protobuf |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration