Lack of error handling in the TCP server in Googles gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Grpc | Grpc | 1.23.0 (including) | 1.53.2 (excluding) |
| Grpc | Grpc | 1.54.0 (including) | 1.54.3 (excluding) |
| Grpc | Grpc | 1.55.0 (including) | 1.55.3 (excluding) |
| Grpc | Grpc | 1.56.0 (including) | 1.56.0 (including) |