grpc/grpc-swift · Security
Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec
- GHSA ID
- GHSA-4rhq-vq24-88gw
- CVE ID
- CVE-2021-36154
- Severity
- medium
- Published
- Updated
Description
Impact
Affected gRPC Swift servers are vulnerable to uncontrolled recursion and stack consumption when parsing certain payloads. This may lead to a denial of service.
Patches
The problem has been fixed in 1.2.0.
Workarounds
No workaround is available. Users must upgrade.
CWEs
- CWE-674 · Uncontrolled Recursion