Skip to content
Threat Feed
Subscribe

Product

GRPC-Go (>= 1.83.0, < 1.83.2)

1 brief RSS
medium advisory

gRPC-Go Denial of Service via HTTP/2 Fragmentation

An unauthenticated remote attacker can exploit HTTP/2 DATA frame fragmentation in gRPC-Go versions <= 1.83.0 to cause heap memory exhaustion and application crashes.

gRPC-Go +3
1t 1c updated