grpc vulnerabilities (Azure Linux)
14 vulnerabilities.
-
grpcAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
grpcAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
grpcAzure Linux gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 6.3 Medium -
grpcAzure Linux Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib 9.8 Critical -
grpcAzure Linux Denial of Service through Data corruption in gRPC-C++ 6.9 Medium -
grpcAzure Linux HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
grpcAzure Linux c-ares out of bounds read in ares__read_line() 4.4 Medium -
grpcAzure Linux Denial of Service in gRPC Core 7.5 High -
grpcAzure Linux Denial-of-Service in gRPC 7.5 High -
grpcAzure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
grpcAzure Linux 0-byte UDP payload DoS in c-ares 7.5 High -
grpcAzure Linux Insufficient randomness in generation of DNS query IDs in c-ares 5.9 Medium -
grpcAzure Linux Buffer Underwrite in ares_inet_net_pton() 4.1 Medium -
grpcAzure Linux A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the... 8.6 High