Vulnerability Details CVE-2021-36153
Mismanaged state in GRPCWebToHTTP2ServerCodec.swift in gRPC Swift 1.1.0 and 1.1.1 allows remote attackers to deny service by sending malformed requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35267
- https://github.com/grpc/grpc-swift/releases
- https://github.com/grpc/grpc-swift/security/advisories/GHSA-2jx2-qcm4-rf9h
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35267
- https://github.com/grpc/grpc-swift/releases
- https://github.com/grpc/grpc-swift/security/advisories/GHSA-2jx2-qcm4-rf9h
Products affected by CVE-2021-36153
-
cpe:2.3:a:linuxfoundation:grpc_swift:1.1.0
-
cpe:2.3:a:linuxfoundation:grpc_swift:1.1.1