p PatchFirst

CVE-2017-8359

CVE-2017-8359

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.

CVSS 9.8 · Critical · EPSS 3.1% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • grpc Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.2-0.1

    Update to 1.3.2-0.1

  • grpc Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.2-0.1

    Update to 1.3.2-0.1

  • grpc Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.2-0.1

    Update to 1.3.2-0.1

  • grpcio PyPI

    Versions
    • 0.10.0a0
    • 0.11.0b0
    • 0.11.0b1
    • 0.12.0b0
    • 0.12.0b8
    • 0.13.0
    • 0.13.1
    • 0.13.1rc1
    • 0.14.0
    • 0.14.0rc1
    • 0.15.0
    • 0.3.0
    • 0.4.0
    • 0.4.0a0
    • 0.4.0a1
    • 0.4.0a13
    • 0.4.0a14
    • 0.4.0a2
    • 0.4.0a3
    • 0.4.0a4
    • 0.4.0a5
    • 0.4.0a6
    • 0.4.0a7
    • 0.4.0a8
    • 0.5.0a0
    • 0.5.0a1
    • 0.5.0a2
    • 0.9.0a0
    • 0.9.0a1
    • 1.0.0
    • 1.0.0rc1
    • 1.0.0rc2
    • 1.0.1
    • 1.0.1rc1
    • 1.0.2
    • 1.0.3
    • 1.0.4
    • 1.1.0
    • 1.1.3
    • 1.2.0
    • 1.2.1
    Affected ranges
    • GIT: < 6544a2d5d9ecdb64214da1d228886a7d15bbf5c7
    • ECOSYSTEM: < 1.3.0

    Update to 1.3.0

  • grpc Ubuntu:16.04:LTS

    Versions
    • 0.10.2-1
    • 0.11.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →