Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Ncteisen

#23686de 53,638
10CVSS total
Vulnerabilidades · 1
PT-2017-4200
10
2017-02-22
Google · Grpc · CVE-2017-9431
**Name of the Vulnerable Software and Affected Versions** Google gRPC versions prior to 2017-04-05 **Description** The issue is related to an out-of-bounds write caused by a heap-based buffer overflow in the core/lib/iomgr/error.c function of the Google gRPC system. This can lead to memory corruption and potentially allow a remote attacker to execute arbitrary code. **Recommendations** For Google gRPC versions prior to 2017-04-05, update to a version released after 2017-04-05 to resolve the issue. As a temporary workaround, consider restricting access to the core/lib/iomgr/error.c function to minimize the risk of exploitation.