OESA-2024-2573

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2573

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-2573.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2024-2573

Upstream

CVE-2024-11407

Published

2024-12-20T13:07:50Z

Modified

2025-08-12T05:41:05.057147Z

Summary

grpc security update

Details

gRPC is a modern open source high performance RPC framework that can run in any environment. It can efficiently connect services in and across data centers with pluggable support for load balancing, tracing, health checking and authentication. It is also applicable in last mile of distributed computing to connect devices, mobile applications and browsers to backend services.

Security Fix(es):

There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPY_ENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission over the network thus leading the receiver to receive an incorrect set of bytes causing RPC requests to fail. We recommend upgrading past commit e9046b2bbebc0cb7f5dc42008f807f6c7e98e791(CVE-2024-11407)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:24.03-LTS / grpc

Package

Name: grpc
Purl: pkg:rpm/openEuler/grpc&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.60.0-5.oe2403

Ecosystem specific

{
    "aarch64": [
        "grpc-1.60.0-5.oe2403.aarch64.rpm",
        "grpc-debuginfo-1.60.0-5.oe2403.aarch64.rpm",
        "grpc-debugsource-1.60.0-5.oe2403.aarch64.rpm",
        "grpc-devel-1.60.0-5.oe2403.aarch64.rpm",
        "grpc-plugins-1.60.0-5.oe2403.aarch64.rpm",
        "python3-grpcio-1.60.0-5.oe2403.aarch64.rpm"
    ],
    "src": [
        "grpc-1.60.0-5.oe2403.src.rpm"
    ],
    "x86_64": [
        "grpc-1.60.0-5.oe2403.x86_64.rpm",
        "grpc-debuginfo-1.60.0-5.oe2403.x86_64.rpm",
        "grpc-debugsource-1.60.0-5.oe2403.x86_64.rpm",
        "grpc-devel-1.60.0-5.oe2403.x86_64.rpm",
        "grpc-plugins-1.60.0-5.oe2403.x86_64.rpm",
        "python3-grpcio-1.60.0-5.oe2403.x86_64.rpm"
    ]
}