{"id":"CVE-2023-1428","aliases":["BELL-CVE-2023-1428","EUVD-2023-1972","GHSA-6628-q6j9-w8vg","PYSEC-2026-1425","RHSA-2024:10761","UBUNTU-CVE-2023-1428"],"status":"published","title":"Denial-of-Service in gRPC","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00406,"percentile":0.3518,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2023-06-09T10:46:54Z","modified":"2026-11-09T12:46:42Z","fixes":[{"ecosystem":"Maven","package":"io.grpc:grpc-protobuf","fixed_in":["1.53.0"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"grpcio","fixed_in":["1.53.0"],"sources":["ghsa","osv"]},{"ecosystem":"RubyGems","package":"grpc","fixed_in":["1.53.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpaquita:23","package":"grpc","fixed_in":["1.59.3-r0"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.grpc:grpc-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"fixed":"1.53.0"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"grpcio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"fixed":"1.53.0"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"fixed":"1.53.0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.50.1-r1"},{"fixed":"1.59.3-r0"}]}]},{"source":"osv","ecosystem":"Maven","package":"io.grpc:grpc-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"fixed":"1.53.0"}]}],"versions":["1.51.0","1.51.1","1.51.3","1.52.0","1.52.1"]},{"source":"osv","ecosystem":"PyPI","package":"grpcio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"fixed":"1.53.0"}]}],"versions":["1.51.0","1.51.1","1.51.3","1.52.0","1.52.0rc1","1.53.0rc2"]},{"source":"osv","ecosystem":"RubyGems","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"fixed":"1.53.0"}]}],"versions":["1.51.0","1.52.0","1.52.0.pre2","1.52.2","1.53.0.pre2"]},{"source":"osv","ecosystem":"PyPI","package":"grpcio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"fixed":"1.53.0"}]}],"versions":["1.51.0","1.51.1","1.51.3","1.52.0","1.52.0rc1","1.53.0rc2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rhc-worker-playbook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.el9_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rhc-worker-playbook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.el9_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.2-1","0.11.1-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.2-1","1.3.2-1ubuntu1","1.3.2-1.1~build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.1-1","1.16.1-1ubuntu1","1.16.1-1ubuntu3","1.16.1-1ubuntu4","1.16.1-1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.51.1-3build3","1.51.1-3build4","1.51.1-4","1.51.1-4build1","1.51.1-4build2","1.51.1-4.1build3","1.51.1-4.1build4","1.51.1-4.1build5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.51.1-6","1.51.1-6build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.51.1-8ubuntu1","1.51.1-9","1.51.1-9ubuntu3","1.51.1-10ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.51.1-6build1","1.51.1-7","1.51.1-7ubuntu2","1.51.1-7ubuntu3","1.51.1-8ubuntu1"]}],"products":[{"vendor":"google","product":"grpc"},{"vendor":"grpc","product":"grpc"}],"references":[{"url":"https://github.com/grpc/grpc/commit/2485fa94bd8a723e5c977d55a3ce10b301b437f8","tags":["x_transferred","Patch","fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1428","tags":["advisory"]},{"url":"https://github.com/grpc/grpc/issues/33463","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/grpc/CVE-2023-1428.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-6628-q6j9-w8vg","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-1428","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1428.json","tags":["advisory"]},{"url":"https://github.com/grpc/grpc","tags":["package"]},{"url":"https://pypi.org/project/grpcio","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10761","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230890","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10761.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40898","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qwmp-2cf2-g9g6","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1428","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32731","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32731","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cfgp-2977-2fmm","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-33953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-33953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33953","tags":["advisory"]},{"url":"https://cloud.google.com/support/bulletins#gcp-2023-022","tags":["article"]},{"url":"https://github.com/advisories/GHSA-496j-2rq6-j6cc","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-1428","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-1428","title":"Denial-of-Service in gRPC","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.\n\n","status":"published","published":"2023-06-09T10:46:54.244Z","modified":"2024-09-26T18:58:56.654Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:35:31.657022Z"}],"euvd":[{"id":"EUVD-2023-1972","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.\n\n","status":"published","published":"2023-06-09T10:46:54Z","modified":"2024-09-26T18:58:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:07.565611Z"}],"ghsa":[{"id":"GHSA-6628-q6j9-w8vg","title":"gRPC Reachable Assertion issue","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.","status":"published","published":"2023-07-06T21:15:08Z","modified":"2025-08-13T15:05:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:38:53.767052Z"}],"nvd":[{"id":"CVE-2023-1428","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.\n\n","status":"published","published":"2023-06-09T11:15:09.2Z","modified":"2026-06-17T05:27:56.347Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:08:05.329837Z"}],"osv":[{"id":"BELL-CVE-2023-1428","status":"published","published":"2023-10-18T13:47:00.74158Z","modified":"2026-09-05T10:49:14.54505Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-1428","title":"Denial-of-Service in gRPC","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.\n\n","status":"published","published":"2023-06-09T10:46:54.244Z","modified":"2026-10-28T10:31:48.367165579Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:44:29.487253Z"},{"id":"GHSA-6628-q6j9-w8vg","title":"gRPC Reachable Assertion issue","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.","status":"published","published":"2023-07-06T21:15:08Z","modified":"2026-09-10T03:49:54.880238612Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:46:39.266402Z"},{"id":"PYSEC-2026-1425","title":"gRPC Reachable Assertion issue","description":"There exists an vulnerability causing an abort() to be called in gRPC. \nThe following headers cause gRPC's C++ implementation to abort() when called via http2:\n\nte: x (x != trailers)\n\n:scheme: x (x != http, https)\n\ngrpclb_client_stats: x (x == anything)\n\nOn top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.","status":"published","published":"2026-07-07T11:45:20.615704Z","modified":"2026-07-07T17:47:41.79573366Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:54.622769Z"},{"id":"RHSA-2024:10761","title":"Red Hat Security Advisory: rhc-worker-playbook security update","status":"published","published":"2024-12-04T10:02:18Z","modified":"2026-10-09T10:09:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"UBUNTU-CVE-2023-1428","description":"There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x != trailers) :scheme: x (x != http, https) grpclb_client_stats: x (x == anything) On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.","status":"published","published":"2023-06-09T11:15:00Z","modified":"2026-11-09T12:46:42.865400465Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-10T03:17:24.327418Z"}]}}