CVE-2023-1428
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-1428
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-1428.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-1428
- Aliases
- Downstream
- Related
- Published
- 2023-06-09T11:15:09Z
- Modified
- 2025-09-19T14:03:22.603649Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2:
te: x (x != trailers)
:scheme: x (x != http, https)
grpclbclientstats: x (x == anything)
On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.
- References
Affected packages
Git / github.com/grpc/grpc
Affected ranges
- Type
- GIT
- Repo
- https://github.com/grpc/grpc
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- GIT
- Repo
- https://github.com/grpc/grpc-go
- Events
- Type
- GIT
- Repo
- https://github.com/grpc/grpc-java
- Events
Affected versions
1.*
1.33.1
objective-c-v1.*
objective-c-v1.0.0-pre1
objective-c-v1.0.2
Other
release-0_10_0
release-0_11
release-0_11_0
release-0_11_1
release-0_12
release-0_12_0
release-0_13_0
release-0_13_1
release-0_14
release-0_14_0
release-0_14_1
release-0_15_0
release-0_15_1
release-0_5_0
release-0_6
release-0_6_0
release-0_9_0
release_test
release-0_10_0-objectivec-0.*
release-0_10_0-objectivec-0.6.0
release-0_11_1-objectivec-0.*
release-0_11_1-objectivec-0.11.1
release-0_12_0-objectivec-0.*
release-0_12_0-objectivec-0.12.0
release-0_14_0-objective-c-0.*
release-0_14_0-objective-c-0.14.0
release-0_14_0-objectivec-0.*
release-0_14_0-objectivec-0.14.0
release-0_9_1-objectivec-0.*
release-0_9_1-objectivec-0.5.1
v0.*
v0.15.0
v1.*
v1.0.0
v1.0.0-pre2
v1.0.1
v1.0.1-pre1
v1.1.0
v1.1.0-pre1
v1.1.1
v1.1.2
v1.1.3
v1.1.4
v1.10.0
v1.10.0-pre1
v1.10.0-pre2
v1.10.1
v1.10.1-pre1
v1.11.0
v1.11.0-pre1
v1.11.0-pre2
v1.12.0
v1.12.0-pre1
v1.12.1
v1.13.0
v1.13.0-pre1
v1.13.0-pre2
v1.13.0-pre3
v1.14.0
v1.14.0-pre1
v1.14.0-pre2
v1.14.1
v1.15.0
v1.15.0-pre1
v1.15.1
v1.16.0
v1.16.0-pre1
v1.16.1
v1.16.1-pre1
v1.17.0
v1.17.0-pre1
v1.17.0-pre2
v1.17.0-pre3
v1.17.1
v1.17.1-pre1
v1.17.2
v1.18.0
v1.18.0-pre1
v1.19.0
v1.19.0-pre1
v1.19.1
v1.2.0
v1.2.0-pre2
v1.2.1
v1.2.2
v1.2.3
v1.2.4
v1.20.0
v1.20.0-pre1
v1.20.0-pre2
v1.20.0-pre3
v1.20.1
v1.21.0
v1.21.0-pre1
v1.21.1
v1.21.2
v1.21.3
v1.21.3-pre1
v1.21.4
v1.21.4-pre1
v1.22.0
v1.22.0-pre1
v1.23.0
v1.23.0-pre1
v1.24.0
v1.24.0-pre1
v1.24.0-pre2
v1.24.1
v1.24.2
v1.24.3
v1.25.0
v1.25.0-pre1
v1.26.0
v1.26.0-pre1
v1.29.0
v1.29.1
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.3.4
v1.3.5
v1.3.6
v1.30.0
v1.30.0-pre1
v1.30.1
v1.30.2
v1.31.0
v1.31.0-pre1
v1.31.0-pre2
v1.31.1
v1.32.0
v1.32.0-pre1
v1.33.0
v1.33.0-pre1
v1.33.0-pre2
v1.33.1
v1.33.2
v1.34.0
v1.34.0-pre1
v1.35.0-pre1
v1.4.0
v1.4.0-pre1
v1.4.1
v1.41.0-pre1
v1.51.0-dev
v1.52.0-dev
v1.6.0
v1.6.0-pre1
v1.6.1
v1.7.0
v1.7.1
v1.7.2
v1.8.0
v1.8.0-pre2
v1.8.1
v1.8.2
v1.8.3
v1.8.4
v1.9.0
v1.9.0-pre1
v1.9.0-pre2
v1.9.0-pre3
v1.9.1
Database specific
{
"vanir_signatures": [
{
"source": "https://github.com/grpc/grpc/commit/2485fa94bd8a723e5c977d55a3ce10b301b437f8",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-1428-92a6729a",
"target": {
"file": "src/core/lib/transport/metadata_batch.h"
},
"digest": {
"line_hashes": [
"77917777258970324137091572071526349858",
"313965056587240481305108022514032655139",
"327942460876962120776632160960094872524",
"319499281142633736843584522608260061550",
"221476168521612255346409415188569777926",
"219191431682892297756968210528234109178",
"29065409360241060735445284276661961567",
"124477756047082237877087743219816045193",
"295267686395818852424067489111555122289",
"267870824821823095641852076205149287760",
"190120333878596716159437050437378710906",
"201256118375080535627866627220441042220"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://github.com/grpc/grpc/commit/2485fa94bd8a723e5c977d55a3ce10b301b437f8",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-1428-ac2d0e5f",
"target": {
"file": "src/core/ext/transport/chttp2/transport/hpack_parser.cc"
},
"digest": {
"line_hashes": [
"248602510802292964769421408036676393273",
"95784582260700503370689081483009089704",
"150246024246185734988961442473965001239",
"129475932549979751744539667166528603028"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://github.com/grpc/grpc-java/commit/4ca6de0e8e52386301890b2860fb7a9a7c2c9b7c",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-1428-c5f45506",
"target": {
"file": "core/src/main/java/io/grpc/internal/GrpcUtil.java"
},
"digest": {
"line_hashes": [
"153505462668301892070772696189317306250",
"40520222390141456988000868829229775555",
"78570411478650308013931737040086710778",
"60539704661294299732272537641085493035"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://github.com/grpc/grpc/commit/2485fa94bd8a723e5c977d55a3ce10b301b437f8",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-1428-cf3e28f7",
"target": {
"file": "src/core/lib/transport/metadata_batch.cc"
},
"digest": {
"line_hashes": [
"296793851486459924260521861757811068285",
"79856173466137552161301557830167225091",
"160921107675916528917926446055468807851"
],
"threshold": 0.9
},
"deprecated": false
}
]
}