Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• 97694 vdb-entry
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=655
• https://github.com/grpc/grpc/pull/9833