Skip to content
OpenAdvisories

Package · SwiftURL

github.com/grpc/grpc-swift

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2022-24777

    Denial of Service via reachable assertion in grpc-swift

    grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework. Prior to version 1.7.2, a grpc-swift server is vulnerable to a denial of service attack via a reachable assertion. This is due to incorrect logic when handling G…

    grpc grpc-swift github.com/grpc/grpc-swift SwiftURL
  • High —
    CVE-2021-36153

    Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec

    Mismanaged state in GRPCWebToHTTP2ServerCodec.swift in gRPC Swift 1.1.0 and 1.1.1 allows remote attackers to deny service by sending malformed requests.

    github.com/grpc/grpc-swift SwiftURL
  • High 7.5
    CVE-2021-36155

    Uncontrolled Resource Consumption in LengthPrefixedMessageReader

    LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and deny service.

    github.com/grpc/grpc-swift SwiftURL
  • Medium —
    CVE-2021-36154

    Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec

    HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption.

    github.com/grpc/grpc-swift SwiftURL