CVE-2023-32731
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-32731
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-32731.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-32731
- Aliases
- Downstream
- Related
- Published
- 2023-06-09T11:15:09Z
- Modified
- 2025-11-12T05:15:48.674009Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration. We recommend upgrading beyond the commit contained in https://github.com/grpc/grpc/pull/33005 https://github.com/grpc/grpc/pull/33005
- References
Affected packages
Git / github.com/grpc/grpc
Git / github.com/grpc/grpc-go
Git / github.com/grpc/grpc-java
Database specific
vanir_signatures
[
{
"source": "https://github.com/grpc/grpc-java/commit/e48040541bb2b42e2465344faee241a24d747466",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"186848686847118742776406955756771337553",
"209791465984131615507118919125284817564",
"29686144606437801261731858559341686526",
"148346904065048773427365455448856051875"
]
},
"id": "CVE-2023-32731-beda6ddb",
"signature_version": "v1",
"target": {
"file": "core/src/main/java/io/grpc/internal/GrpcUtil.java"
},
"deprecated": false
}
]