Skip to content
OpenAdvisories
High · 7.4 CVE-2023-32731 EUVD-2023-2030GHSA-cfgp-2977-2fmmPYSEC-2026-1427

Information leak in gRPC

Published Jun 9, 2023 · Updated Sep 26, 2024 · Assigned by Google

Description

When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration. We recommend upgrading beyond the commit contained in  https://github.com/grpc/grpc/pull/33005 https://github.com/grpc/grpc/pull/33005

Affected products

VendorProductAffectedFixed
Google gRPC 1.53 – ≤ 1.54 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 grpc No fix yet —
Ubuntu 25.10 grpc No fix yet —
Ubuntu 24.04 LTS grpc No fix yet —
Ubuntu 20.04 LTS grpc No fix yet —
Ubuntu 18.04 LTS grpc No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS grpc No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 rhc-worker-playbook 0.1.10-1.el9_5 RHSA-2024:10761
ReleasePackageFixed inAdvisory
SLES 15 SP5 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SLES 15 SP5 grpc 1.60.0-150400.8.3.2 SUSE-SU-2024:0573-1
SLES 15 SP5 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLES 15 SP5 re2 20240201-150400.9.3.1 SUSE-SU-2024:0573-1
SLES 15 SP4 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SLES 15 SP4 grpc 1.60.0-150400.8.3.2 SUSE-SU-2024:0573-1
SLES 15 SP4 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLES 15 SP4 re2 20240201-150400.9.3.1 SUSE-SU-2024:0573-1
SLES 3 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLES 3 python-abseil 1.4.0-150400.9.3.1 SUSE-SU-2024:0573-1
SLES 3 python-grpcio 1.60.0-150400.9.3.2 SUSE-SU-2024:0573-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SLES for SAP 15 SP4 grpc 1.60.0-150400.8.3.2 SUSE-SU-2024:0573-1
SLES for SAP 15 SP4 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLES for SAP 15 SP4 re2 20240201-150400.9.3.1 SUSE-SU-2024:0573-1
SLE Micro 5.5 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SLE Micro 5.5 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLE Micro 5.4 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SLE Micro 5.4 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLE Micro 5.3 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SLE Micro 5.3 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLE HPC 15 SP4 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SLE HPC 15 SP4 grpc 1.60.0-150400.8.3.2 SUSE-SU-2024:0573-1
SLE HPC 15 SP4 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SLE HPC 15 SP4 re2 20240201-150400.9.3.1 SUSE-SU-2024:0573-1
SUSE Manager Proxy 4.3 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SUSE Manager Proxy 4.3 grpc 1.60.0-150400.8.3.2 SUSE-SU-2024:0573-1
SUSE Manager Proxy 4.3 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SUSE Manager Proxy 4.3 re2 20240201-150400.9.3.1 SUSE-SU-2024:0573-1
SUSE Linux Enterprise Installer Updates 15 SP5 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SUSE Linux Enterprise Installer Updates 15 SP5 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
SUSE Linux Enterprise Installer Updates 15 SP4 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
SUSE Linux Enterprise Installer Updates 15 SP4 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-grpcio 1.84.0-1.1 openSUSE-SU-2026:11926-1
openSUSE Leap 15.5 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
openSUSE Leap 15.5 grpc 1.60.0-150400.8.3.2 SUSE-SU-2024:0573-1
openSUSE Leap 15.5 opencensus-proto 0.3.0+git.20200721-150400.9.3.1 SUSE-SU-2024:0573-1
openSUSE Leap 15.5 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
openSUSE Leap 15.5 python-abseil 1.4.0-150400.9.3.1 SUSE-SU-2024:0573-1
openSUSE Leap 15.5 python-grpcio 1.60.0-150400.9.3.2 SUSE-SU-2024:0573-1
openSUSE Leap 15.5 re2 20240201-150400.9.3.1 SUSE-SU-2024:0573-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.4 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
openSUSE Leap Micro 5.4 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1
openSUSE Leap Micro 5.3 abseil-cpp 20230802.1-150400.10.4.1 SUSE-SU-2024:0573-1
openSUSE Leap Micro 5.3 protobuf 25.1-150400.9.3.1 SUSE-SU-2024:0573-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 grpc +5 1.56.2-10.amzn2023 ALAS2023-2023-282

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling wavefront-proxy 13.4-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven io.grpc:grpc-protobuf >= 1.53.0, < 1.53.1 1.53.1 GHSA-cfgp-2977-2fmm
Maven io.grpc:grpc-protobuf >= 1.54.0, < 1.54.2 1.54.2 GHSA-cfgp-2977-2fmm
PyPI grpcio >= 1.53.0, < 1.53.1 · >= 1.54.0, < 1.54.2 1.53.1, 1.54.2 PYSEC-2026-1427
PyPI grpcio >= 1.53.0, < 1.53.1 1.53.1 GHSA-cfgp-2977-2fmm
PyPI grpcio >= 1.54.0, < 1.54.2 1.54.2 GHSA-cfgp-2977-2fmm
RubyGems grpc >= 1.53.0, < 1.53.1 1.53.1 GHSA-cfgp-2977-2fmm
RubyGems grpc >= 1.54.0, < 1.54.2 1.54.2 GHSA-cfgp-2977-2fmm

Advisories 5

References