The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Sep 13, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade grpc | Jan 10, 2024 | Sep 13, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade grpc | Jan 10, 2024 | Sep 13, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade grpc | Jul 23, 2024 | Sep 13, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade grpc | Jan 10, 2024 | Sep 13, 2023 |
| Suse | — | Upgrade libprotoc25_1_0-32bitUpgrade libgrpc1_60Upgrade libprotoc25_1_0Upgrade python311-abseilUpgrade libabsl2308_0_0-32bitUpgrade protobuf-javaUpgrade libabsl2308_0_0Upgrade grpc-sourceUpgrade libprotobuf-lite25_1_0Upgrade libgrpc++1_60Upgrade upb-develUpgrade libre2-11-32bitUpgrade protobuf-develUpgrade abseil-cpp-develUpgrade python311-grpcioUpgrade re2-develUpgrade grpc-develUpgrade libprotobuf25_1_0-32bitUpgrade libupb37Upgrade libre2-11Upgrade libgrpc37Upgrade libprotobuf25_1_0Upgrade python311-protobufUpgrade libprotobuf-lite25_1_0-32bitUpgrade opencensus-proto-source | Feb 22, 2024 | Sep 13, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub