PT-2023-24594 · Grpc+3 · Grpc+3
Published
2023-08-09
·
Updated
2026-03-06
·
CVE-2023-33953
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
gRPC (affected versions not specified)
Description
The issue allows hpack table accounting errors, which could lead to unwanted disconnects between clients and servers in exceptional cases. Three vectors were found that allow the following DOS attacks: unbounded memory buffering in the HPACK parser and unbounded CPU consumption in the HPACK parser. The unbounded CPU consumption is due to a copy that occurred per-input-block in the parser, resulting in an O(n^2) parsing loop, with n selected by the client. The unbounded memory buffering bugs include: the header size limit check being behind the string reading code, HPACK varints having an encoding quirk whereby an infinite number of 0’s can be added at the start of an integer, and gRPC’s metadata overflow check being performed per frame, allowing a sequence of frames to cause infinite buffering.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Red Hat
Suse
Grpc