GitHub Advisoryadvisory · SwiftURL

GHSA-2jx2-qcm4-rf9h Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec

HIGH Published 2023-06-09 Modified 2023-06-09 Official page ↗
Aliases
CVE-2021-36153
Ecosystem
SwiftURL
Packages
github.com/grpc/grpc-swift
Severity
High
Reviewed
2023-06-09

Affected packages

• SwiftURL github.com/grpc/grpc-swift: < 1.2.0 → fixed in 1.2.0

Description

Impact Affected gRPC Swift servers are vulnerable to precondition failures when parsing certain gRPC Web requests. This may lead to a denial of service. Patches The problem has been fixed in 1.2.0. Workarounds No workaround is available. Users must upgrade.

Related

Alias · CVE (1)

  • CVE-2021-36153 Mismanaged state in GRPCWebToHTTP2ServerCodec.swift in gRPC Swift 1.1.0 and 1.1.1 allows remote attackers to deny service by sending… vulnerability

References