GR
Product
Grpc
On CISA KEVExploited in the wild
15
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 3Low 0
Watch
Add Grpc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: before 1.56.3; through 1.59.2; 1.58.0 before 1.58.3; 1.57.0 |
| CVE-2024-11407 | 7.5 | Nov 26 | Denial of Service through Data corruption in gRPC-C++ Affected: 1.60.0 before 1.66.1 |
| CVE-2023-4785 | 7.5 | Sep 13 | Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex Affected: 1.23.0 before 1.53.2; 1.54.0 before 1.54.3; 1.55.0 before 1.55.3; 1.56.0 |
| CVE-2023-33953 | 7.5 | Aug 9 | gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were… Affected: before 1.53.2; 1.54.0 before 1.54.3; 1.55.0 before 1.55.2; 1.56.0 before 1.56.2 |
| CVE-2023-32731 | 7.5 | Jun 9 | When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame Affected: 1.53.0 before 1.55.0 |
| CVE-2023-1428 | 7.5 | Jun 9 | There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x !=… Affected: 1.51.0 before 1.53.0 |
Showing 6