When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration. We recommend upgrading beyond the commit contained inĀ  https://github.com/grpc/grpc/pull/33005 https://github.com/grpc/grpc/pull/33005
History

Wed, 30 Oct 2024 02:15:00 +0000

Type Values Removed Values Added
References

Thu, 26 Sep 2024 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Google

Published: 2023-06-09T10:54:08.472Z

Updated: 2024-09-26T19:12:06.245Z

Reserved: 2023-05-12T08:58:54.033Z

Link: CVE-2023-32731

cve-icon Vulnrichment

Updated: 2024-08-02T15:25:37.017Z

cve-icon NVD

Status : Analyzed

Published: 2023-06-09T11:15:09.303

Modified: 2023-06-15T22:18:49.193

Link: CVE-2023-32731

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-06-09T00:00:00Z

Links: CVE-2023-32731 - Bugzilla