~ / search / GHSA-rxmj-hg9v-vp3p

GHSA-rxmj-hg9v-vp3p

Uncontrolled Resource Consumption in LengthPrefixedMessageReader

Source: GitHub Advisory Database (reviewed) High CVE-2021-36155

Packages

EcosystemPackageAffectedFixed in
SwiftURL github.com/grpc/grpc-swift < 1.2.0 1.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Affected gRPC Swift clients and servers are vulnerable to uncontrolled resource consumption attacks. Excessive memory may be allocated when parsing messages. This can lead to a denial of service. ### Patches The problem has been fixed in 1.2.0. ### Workarounds No workaround is available. Users must upgrade.

References

External links from the advisory. They lead to third-party sites.