Vulnerabilities > Linuxfoundation > Grpc Swift > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-03-25 CVE-2022-24777 Reachable Assertion vulnerability in Linuxfoundation Grpc Swift
grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework.
network
low complexity
linuxfoundation CWE-617
5.0
2021-07-09 CVE-2021-36153 Unspecified vulnerability in Linuxfoundation Grpc Swift 1.1.0/1.1.1
Mismanaged state in GRPCWebToHTTP2ServerCodec.swift in gRPC Swift 1.1.0 and 1.1.1 allows remote attackers to deny service by sending malformed requests.
network
low complexity
linuxfoundation
5.0
2021-07-09 CVE-2021-36154 Uncontrolled Recursion vulnerability in Linuxfoundation Grpc Swift 1.0.0/1.1.0/1.1.1
HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption.
network
low complexity
linuxfoundation CWE-674
5.0
2021-07-09 CVE-2021-36155 Allocation of Resources Without Limits or Throttling vulnerability in Linuxfoundation Grpc Swift 1.0.0/1.1.0/1.1.1
LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and deny service.
network
low complexity
linuxfoundation CWE-770
5.0