An attacker can send HTTP/2 requests, cancel them, and send subsequent requests. This is valid by the HTTP/2 protocol, but would cause the gRPC-Go server to launch more concurrent method handlers than ...
Continue ReadingDecember 15, 2023
CVE-2022-4904 affecting package grpc 1.42.0-7. No patch is available...Read More ...
Continue ReadingDecember 15, 2023
CVE-2022-1941 affecting package grpc 1.42.0-7. This CVE either no longer is or was never...Read More ...
Continue ReadingDecember 15, 2023
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8570e0055b advisory. gRPC contains a vulnerability whereby a client can cause a ...
Continue ReadingDecember 15, 2023
CVE-2022-4904 affecting package grpc 1.42.0-7. No patch is available...Read More ...
Continue ReadingDecember 15, 2023
### Impact In affected releases of gRPC-Go, it is possible for an attacker to send HTTP/2 requests, cancel them, and send subsequent requests, which is valid by the HTTP/2 protocol, but would cause th ...
Continue ReadingDecember 15, 2023
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels net.peer.sock.addr and net. ...
Continue ReadingDecember 15, 2023
Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized too ...
Continue ReadingDecember 15, 2023
Back to Main