GitHub Advisoryadvisory · SwiftURL

GHSA-4rhq-vq24-88gw Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec

MEDIUM Published 2023-05-22 Modified 2023-05-22 Official page ↗
Aliases
CVE-2021-36154
Ecosystem
SwiftURL
Packages
github.com/grpc/grpc-swift
Severity
Moderate
Weaknesses
CWE-674
Reviewed
2023-05-22

Affected packages

• SwiftURL github.com/grpc/grpc-swift: < 1.2.0 → fixed in 1.2.0

Description

Impact Affected gRPC Swift servers are vulnerable to uncontrolled recursion and stack consumption when parsing certain payloads. This may lead to a denial of service. Patches The problem has been fixed in 1.2.0. Workarounds No workaround is available. Users must upgrade.

Related

Alias · CVE (1)

  • CVE-2021-36154 HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages… vulnerability

Weakness · CWE (1)

  • CWE-674 Uncontrolled Recursion weakness

References