~ / search / GHSA-4rhq-vq24-88gw

GHSA-4rhq-vq24-88gw

Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-36154

Packages

EcosystemPackageAffectedFixed in
SwiftURL github.com/grpc/grpc-swift < 1.2.0 1.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Affected gRPC Swift servers are vulnerable to uncontrolled recursion and stack consumption when parsing certain payloads. This may lead to a denial of service. ### Patches The problem has been fixed in 1.2.0. ### Workarounds No workaround is available. Users must upgrade.

References

External links from the advisory. They lead to third-party sites.