gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit in https://github.com/grpc/grpc/pull/32309 https://www.google.com/url
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Jun 9, 2023 |
| Suse | — | Upgrade libprotobuf-lite25_1_0-32bitUpgrade opencensus-proto-sourceUpgrade python311-abseilUpgrade libabsl2308_0_0-32bitUpgrade python311-protobufUpgrade re2-develUpgrade libupb37Upgrade upb-develUpgrade libabsl2308_0_0Upgrade libprotobuf25_1_0Upgrade libprotobuf25_1_0-32bitUpgrade libgrpc++1_60Upgrade libgrpc37Upgrade grpc-sourceUpgrade libgrpc1_60Upgrade abseil-cpp-develUpgrade protobuf-javaUpgrade libre2-11-32bitUpgrade grpc-develUpgrade libre2-11Upgrade libprotoc25_1_0Upgrade libprotobuf-lite25_1_0Upgrade protobuf-develUpgrade python311-grpcioUpgrade libprotoc25_1_0-32bit | Feb 22, 2024 | Jun 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub