grpc 1.53 Header abort assertion

Summaryinfo

A vulnerability categorized as problematic has been discovered in grpc 1.53. This affects the function abort of the component Header Handler. The manipulation results in assertion. This vulnerability is reported as CVE-2023-1428. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in grpc 1.53. It has been classified as problematic. Affected is the function abort of the component Header Handler. The manipulation with an unknown input leads to a assertion vulnerability. CWE is classifying the issue as CWE-617. The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary. This is going to have an impact on availability. CVE summarizes:

There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x != trailers) :scheme: x (x != http, https) grpclb_client_stats: x (x == anything) On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.

The weakness was disclosed 06/09/2023 as 2485fa94bd8a723e5c977d55a3ce10b301b437f8. The advisory is available at github.com. This vulnerability is traded as CVE-2023-1428 since 03/16/2023. Technical details are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 212043 (RHEL 9 : rhc-worker-playbook (RHSA-2024:10761)), which helps to determine the existence of the flaw in a target environment.

Upgrading eliminates this vulnerability. Applying the patch 2485fa94bd8a723e5c977d55a3ce10b301b437f8 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at Tenable (212043). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• grpc

Version

• 1.53

License

• open-source

Website

• Product: https://github.com/grpc/grpc/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion