Vulnerabilities > CVE-2023-4785 - Unspecified vulnerability in Grpc

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

grpc

NVD

Published: 2023-09-13

Updated: 2024-11-21

Summary

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected.

Vulnerable Configurations

Part	Description	Count
Application	Grpc Grpc Grpc 1.54.0 Grpc Grpc 1.54.1 Grpc Grpc 1.54.2 Grpc Grpc 1.23.3 Grpc Grpc 1.23.4 Grpc Grpc 1.24.2 Grpc Grpc 1.24.3 Grpc Grpc 1.24.4 Grpc Grpc 1.25.0 Grpc Grpc 1.26.0 Grpc Grpc 1.27.0 Grpc Grpc 1.27.1 Grpc Grpc 1.27.2 Grpc Grpc 1.27.3 Grpc Grpc 1.28.0 Grpc Grpc 1.28.1 Grpc Grpc 1.28.2 Grpc Grpc 1.29.0 Grpc Grpc 1.29.1 Grpc Grpc 1.30.0 Grpc Grpc 1.30.1 Grpc Grpc 1.30.2 Grpc Grpc 1.31.0 Grpc Grpc 1.31.1 Grpc Grpc 1.32.0 Grpc Grpc 1.33.0 Grpc Grpc 1.33.1 Grpc Grpc 1.33.2 Grpc Grpc 1.34.0 Grpc Grpc 1.34.1 Grpc Grpc 1.35.0 Grpc Grpc 1.36.0 Grpc Grpc 1.36.1 Grpc Grpc 1.36.2 Grpc Grpc 1.36.3 Grpc Grpc 1.36.4 Grpc Grpc 1.37.0 Grpc Grpc 1.37.1 Grpc Grpc 1.38.0 Grpc Grpc 1.38.1 Grpc Grpc 1.39.0 Grpc Grpc 1.39.1 Grpc Grpc 1.40.0 Grpc Grpc 1.41.0 Grpc Grpc 1.41.1 Grpc Grpc 1.42.0 Grpc Grpc 1.43.0 Grpc Grpc 1.43.2 Grpc Grpc 1.44.0 Grpc Grpc 1.44.1 Grpc Grpc 1.45.0 Grpc Grpc 1.45.1 Grpc Grpc 1.45.2 Grpc Grpc 1.45.3 Grpc Grpc 1.46.0 Grpc Grpc 1.46.1 Grpc Grpc 1.46.2 Grpc Grpc 1.46.3 Grpc Grpc 1.46.4 Grpc Grpc 1.46.5 Grpc Grpc 1.46.6 Grpc Grpc 1.46.7 Grpc Grpc 1.47.0 Grpc Grpc 1.47.1 Grpc Grpc 1.47.2 Grpc Grpc 1.47.3 Grpc Grpc 1.47.4 Grpc Grpc 1.47.5 Grpc Grpc 1.48.0 Grpc Grpc 1.48.1 Grpc Grpc 1.48.2 Grpc Grpc 1.48.3 Grpc Grpc 1.48.4 Grpc Grpc 1.49.0 Grpc Grpc 1.49.1 Grpc Grpc 1.49.2 Grpc Grpc 1.49.3 Grpc Grpc 1.50.0 Grpc Grpc 1.50.1 Grpc Grpc 1.50.2 Grpc Grpc 1.51.0 Grpc Grpc 1.51.1 Grpc Grpc 1.51.2 Grpc Grpc 1.51.3 Grpc Grpc 1.52.0 Grpc Grpc 1.52.1 Grpc Grpc 1.52.2 Grpc Grpc 1.53.0 Grpc Grpc 1.53.1 Grpc Grpc 1.55.0 Grpc Grpc 1.55.1 Grpc Grpc 1.56.0	136

Summary

Vulnerable Configurations

References