When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration. We recommend upgrading beyond the commit contained inĀ https://github.com/grpc/grpc/pull/33005 https://github.com/grpc/grpc/pull/33005
Metrics
Affected Vendors & Products
References
History
Wed, 30 Oct 2024 02:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
Thu, 26 Sep 2024 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: Google
Published: 2023-06-09T10:54:08.472Z
Updated: 2024-09-26T19:12:06.245Z
Reserved: 2023-05-12T08:58:54.033Z
Link: CVE-2023-32731
Vulnrichment
Updated: 2024-08-02T15:25:37.017Z
NVD
Status : Analyzed
Published: 2023-06-09T11:15:09.303
Modified: 2023-06-15T22:18:49.193
Link: CVE-2023-32731
Redhat