Mismanaged state in GRPCWebToHTTP2ServerCodec.swift in gRPC Swift 1.1.0 and 1.1.1 allows remote attackers to deny service by sending malformed requests.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Grpc_swift | Linuxfoundation | 1.1.0 (including) | 1.1.0 (including) |
| Grpc_swift | Linuxfoundation | 1.1.1 (including) | 1.1.1 (including) |
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35267
- https://github.com/grpc/grpc-swift/releases
- https://github.com/grpc/grpc-swift/security/advisories/GHSA-2jx2-qcm4-rf9h
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35267
- https://github.com/grpc/grpc-swift/releases
- https://github.com/grpc/grpc-swift/security/advisories/GHSA-2jx2-qcm4-rf9h