gRPC - CVE CyberSecurity Database News

Jun 14, 2024 Exploit gRPC Gitlab

CVE-2024-5469: DoS Vulnerability in KAS of GitLab CE/EE - Affecting Versions 16.10. to 16.10.6 and 16.11. to 16.11.3

A recent CVE (Common Vulnerabilities and Exposures) entry has come to light that presents a DoS (Denial-of-Service) vulnerability in the KAS (Kubernetes Agent Server) of

May 23, 2024 API gRPC dapr

CVE-2024-35223 - Dapr gRPC Proxy App Token Leak in Remote Service Invocation

Dapr is a flexible, event-driven runtime that is designed to streamline the development and deployment of distributed applications across cloud and edge environments. In this

Sep 13, 2023 gRPC Java Google

CVE-2023-4785: Uncovering a Denial of Service Vulnerability in Google's gRPC TCP Server

CVE-2023-4785 is a recently discovered vulnerability that affects Google's gRPC framework. In particular, the vulnerability arises due to a lack of error handling

CVE-2023-33953: gRPC Vulnerability in HPACK Table Accounting Leads to Potential DOS Attacks

Aug 9, 2023 gRPC Google

CVE-2023-33953: gRPC Vulnerability in HPACK Table Accounting Leads to Potential DOS Attacks

A recent vulnerability has been identified in gRPC (CVE-2023-33953), which affects the HPACK table accounting system. This vulnerability could lead to unwanted disconnects between clients

Jul 25, 2023 Exploit gRPC envoyproxy envoy

CVE-2023-35942 - Critical Vulnerability in Envoy Proxy: gRPC Access Loggers Use-After-Free Crash

Envoy is a popular open source edge and service proxy specifically designed for cloud-native applications. It helps enable secure and reliable communication across multiple microservices.