Resource exhaustion in gRPC - CVE-2023-4785

Vulnerability identifier: #VU82653

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4785

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to lack of error handling in the TCP server in Google's gRPC. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack by initiating a significant number of connections with the server.

gRPC
Amazon Linux AMI
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Public Cloud Module
SUSE Linux Enterprise Server 15 SP4 LTSS
Development Tools Module
Basesystem Module
SUSE Package Hub 15
Python 3 Module
openSUSE Leap
openEuler
Red Hat Satellite
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Juniper Cloud Native Router
Oracle Business Intelligence Enterprise Edition
Answer Retrieval for Watson Discovery On Prem
IBM Cloud Pak for Watson AIOps
Storage Resource Manager
opencensus-proto-source
satellite-convert2rhel-toolkit (Red Hat package)
python311-abseil
grpc
python3-grpcio
grpc-devel
grpc-debuginfo
grpc-debugsource
rubygem-grpc (Red Hat package)
upb-devel
libgrpc++1_60-debuginfo
libgrpc++1_60
libgrpc1_60-debuginfo
libupb37
libgrpc1_60
grpc-source
grpc-devel-debuginfo
libgrpc37
libupb37-debuginfo
libgrpc37-debuginfo
python311-grpcio-debuginfo
python-grpcio-debugsource
python311-grpcio
mosquitto (Red Hat package)
python-pulp-container (Red Hat package)
foreman-installer (Red Hat package)
foreman (Red Hat package)
rubygem-google-protobuf (Red Hat package)
candlepin (Red Hat package)
rubygem-katello (Red Hat package)
python311-protobuf
rubygem-puma (Red Hat package)
rubygem-sidekiq (Red Hat package)
satellite (Red Hat package)
rubygem-kafo (Red Hat package)
puppetserver (Red Hat package)
puppet-agent (Red Hat package)
rubygem-foreman_bootdisk (Red Hat package)
libprotoc25_1_0-64bit-debuginfo
libprotobuf25_1_0-64bit-debuginfo
libprotobuf25_1_0-64bit
libprotoc25_1_0
libprotoc25_1_0-64bit
libprotobuf-lite25_1_0-64bit-debuginfo
libprotobuf25_1_0-debuginfo
protobuf-devel-debuginfo
protobuf-debugsource
libprotobuf25_1_0
protobuf-java
libprotobuf-lite25_1_0
libprotobuf-lite25_1_0-debuginfo
protobuf-devel
libprotoc25_1_0-debuginfo
libprotobuf25_1_0-32bit
libprotobuf-lite25_1_0-32bit
libprotobuf-lite25_1_0-32bit-debuginfo
libprotobuf25_1_0-32bit-debuginfo
libprotoc25_1_0-32bit-debuginfo
libprotoc25_1_0-32bit
libprotobuf-lite25_1_0-64bit
libabsl2308_0_0
abseil-cpp-devel
libabsl2308_0_0-32bit-debuginfo
libabsl2308_0_0-debuginfo
libabsl2308_0_0-32bit
libabsl2308_0_0-64bit-debuginfo
abseil-cpp-debugsource
libabsl2308_0_0-64bit
libre2-11
re2-debugsource
libre2-11-64bit
libre2-11-64bit-debuginfo
libre2-11-32bit
libre2-11-32bit-debuginfo
re2-devel
libre2-11-debuginfo
Dell EMC Storage Monitoring and Reporting (SMR)
Junos cRPD

Install updates from vendor's website.

gRPC - addressed in versions 1.53.2, 1.54.3, 1.55.3, 1.56.2
Red Hat Satellite - update to 6.14.2
opencensus-proto-source - update to 0.3.0+git.20200721-150400.9.3.1
satellite-convert2rhel-toolkit (Red Hat package) - update to 1.0.1-1.el8sat
python311-abseil - update to 1.4.0-150400.9.3.1
grpc - addressed in versions 1.31.0-5, 1.31.0-8
python3-grpcio - addressed in versions 1.31.0-5, 1.31.0-8
grpc-devel - addressed in versions 1.31.0-5, 1.31.0-8
grpc-debuginfo - addressed in versions 1.31.0-5, 1.31.0-8
grpc-debugsource - addressed in versions 1.31.0-5, 1.31.0-8
grpc - update to 1.56.2-10
rubygem-grpc (Red Hat package) - update to 1.58.0-1.el8sat
grpc-debugsource - update to 1.60.0-150400.8.3.2
upb-devel - update to 1.60.0-150400.8.3.2
grpc-devel - update to 1.60.0-150400.8.3.2
libgrpc++1_60-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc++1_60 - update to 1.60.0-150400.8.3.2
grpc-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc1_60-debuginfo - update to 1.60.0-150400.8.3.2
libupb37 - update to 1.60.0-150400.8.3.2
libgrpc1_60 - update to 1.60.0-150400.8.3.2
grpc-source - update to 1.60.0-150400.8.3.2
grpc-devel-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc37 - update to 1.60.0-150400.8.3.2
libupb37-debuginfo - update to 1.60.0-150400.8.3.2
libgrpc37-debuginfo - update to 1.60.0-150400.8.3.2
python311-grpcio-debuginfo - update to 1.60.0-150400.9.3.2
python-grpcio-debugsource - update to 1.60.0-150400.9.3.2
python311-grpcio - update to 1.60.0-150400.9.3.2
mosquitto (Red Hat package) - update to 2.0.17-1.el8sat
Answer Retrieval for Watson Discovery On Prem - update to 2.14.0
python-pulp-container (Red Hat package) - update to 2.14.11-1.el8pc
foreman-installer (Red Hat package) - update to 3.7.0.7-1.el8sat
foreman (Red Hat package) - update to 3.7.0.11-2.el8sat
rubygem-google-protobuf (Red Hat package) - update to 3.24.3-1.el8sat
candlepin (Red Hat package) - update to 4.3.11-1.el8sat
IBM Cloud Pak for Watson AIOps - update to 4.5.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.5
rubygem-katello (Red Hat package) - update to 4.9.0.21-1.el8sat
python311-protobuf - update to 4.25.1-150400.9.3.1
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
rubygem-puma (Red Hat package) - update to 6.3.1-1.el8sat
rubygem-sidekiq (Red Hat package) - update to 6.5.12-1.el8sat
satellite (Red Hat package) - update to 6.14.2-1.el8sat
rubygem-kafo (Red Hat package) - update to 7.2.0-1.el8sat
puppetserver (Red Hat package) - update to 7.14.0-1.el8sat
puppet-agent (Red Hat package) - update to 7.27.0-1.el8sat
rubygem-foreman_bootdisk (Red Hat package) - update to 21.2.1-1.el8sat
Junos cRPD - update to 23.4R1
Juniper Cloud Native Router - update to 23.4R1
libprotoc25_1_0-64bit-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-64bit-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-64bit - update to 25.1-150400.9.3.1
libprotoc25_1_0 - update to 25.1-150400.9.3.1
libprotoc25_1_0-64bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-64bit-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-debuginfo - update to 25.1-150400.9.3.1
protobuf-devel-debuginfo - update to 25.1-150400.9.3.1
protobuf-debugsource - update to 25.1-150400.9.3.1
libprotobuf25_1_0 - update to 25.1-150400.9.3.1
protobuf-java - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0 - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-debuginfo - update to 25.1-150400.9.3.1
protobuf-devel - update to 25.1-150400.9.3.1
libprotoc25_1_0-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-32bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-32bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-32bit-debuginfo - update to 25.1-150400.9.3.1
libprotobuf25_1_0-32bit-debuginfo - update to 25.1-150400.9.3.1
libprotoc25_1_0-32bit-debuginfo - update to 25.1-150400.9.3.1
libprotoc25_1_0-32bit - update to 25.1-150400.9.3.1
libprotobuf-lite25_1_0-64bit - update to 25.1-150400.9.3.1
libabsl2308_0_0 - update to 20230802.1-150400.10.4.1
abseil-cpp-devel - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-32bit-debuginfo - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-debuginfo - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-32bit - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-64bit-debuginfo - update to 20230802.1-150400.10.4.1
abseil-cpp-debugsource - update to 20230802.1-150400.10.4.1
libabsl2308_0_0-64bit - update to 20230802.1-150400.10.4.1
libre2-11 - update to 20240201-150400.9.3.1
re2-debugsource - update to 20240201-150400.9.3.1
libre2-11-64bit - update to 20240201-150400.9.3.1
libre2-11-64bit-debuginfo - update to 20240201-150400.9.3.1
libre2-11-32bit - update to 20240201-150400.9.3.1
libre2-11-32bit-debuginfo - update to 20240201-150400.9.3.1
re2-devel - update to 20240201-150400.9.3.1
libre2-11-debuginfo - update to 20240201-150400.9.3.1

• https://github.com/grpc/grpc/pull/33670
• https://github.com/grpc/grpc/pull/33672
• https://github.com/grpc/grpc/pull/33656
• https://github.com/grpc/grpc/pull/33667
• https://github.com/grpc/grpc/pull/33669

• Multiple vulnerabilities in IBM Answer Retrieval for Watson Discovery
• Multiple vulnerabilities in Red Hat Satellite 6.14
• SUSE update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2
• openEuler update for grpc
• openEuler 20.03 LTS SP1 update for grpc
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in Juniper Cloud Native Router
• Multiple vulnerabilities in Juniper Networks Junos cRPD
• Resource exhaustion in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Amazon Linux AMI update for grpc