Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-32732
HistoryJun 09, 2023 - 11:15 a.m.

Design/Logic Flaw

2023-06-0911:15:00
PRIOn knowledge base
www.prio-n.com
9
grpc
vulnerability
http2 proxy
termination
server
upgrade
nvd
base64 encoding

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for -bin suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit inΒ  https://github.com/grpc/grpc/pull/32309 https://www.google.com/url

CPENameOperatorVersion
fedoraeq37
fedoraeq38
grpclt1.53.0

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%