Lack of error handling in the TCP server in Googles gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected.
Weakness
An exception is thrown from a function, but it is not caught.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Grpc | Grpc | 1.23.0 (including) | 1.53.2 (excluding) |
| Grpc | Grpc | 1.54.0 (including) | 1.54.3 (excluding) |
| Grpc | Grpc | 1.55.0 (including) | 1.55.3 (excluding) |
| Grpc | Grpc | 1.56.0 (including) | 1.56.0 (including) |
| Red Hat Satellite 6.14 for RHEL 8 | RedHat | rubygem-grpc-0:1.58.0-1.el8sat | * |
| Grpc | Ubuntu | bionic | * |
| Grpc | Ubuntu | focal | * |
| Grpc | Ubuntu | lunar | * |
| Grpc | Ubuntu | mantic | * |
| Grpc | Ubuntu | oracular | * |
| Grpc | Ubuntu | plucky | * |
| Grpc | Ubuntu | trusty | * |
| Grpc | Ubuntu | xenial | * |
References
- https://github.com/grpc/grpc/pull/33656
- https://github.com/grpc/grpc/pull/33667
- https://github.com/grpc/grpc/pull/33669
- https://github.com/grpc/grpc/pull/33670
- https://github.com/grpc/grpc/pull/33672
- https://github.com/grpc/grpc/pull/33656
- https://github.com/grpc/grpc/pull/33667
- https://github.com/grpc/grpc/pull/33669
- https://github.com/grpc/grpc/pull/33670
- https://github.com/grpc/grpc/pull/33672