CRITICAL🇵🇱 Wersja polska

CVE-2017-7860

CVSS 9.8v3.0pub. 2017-04-14upd. 2026-05-13

Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client_channel/parse_address.c.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Grpc

    APP
    Grpc
    ≤ 1.1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2026-33186CRITICAL9.1PL ✓same product

gRPC-Go: Authorization Bypass przez nieprawidłowy nagłówek HTTP/2 :path

CVE-2017-9431CRITICAL9.8PL ✓same product

Heap-based buffer overflow w Google gRPC — zapis poza granicami pamięci

CVE-2017-8359CRITICAL9.8PL ✓same product

Google gRPC — zapis poza granicami pamięci przez use-after-free w grpc_call_destroy

CVE-2017-7861CRITICAL9.8PL ✓same product

Zapis poza granicami bufora w Google gRPC (gpr_free)

CVE-2023-4785HIGH7.5same product

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ...