CVE-2023-32732

Advisory

gRPC contains a vulnerability whereby a client can cause a termination of the connection between an HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/grpc/grpc/pull/32309
• https://github.com/advisories/GHSA-9hxf-ppjv-w6rq
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32732