Read the docs
TI-2023-01349 Aliases CVE-2023-1428GHSA-6628-q6j9-w8vg

Denial-of-Service in gRPC

Priority LOW 39CWE-617Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 1 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-617.

Summary

There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x != trailers) :scheme: x (x != http, https) grpclb_client_stats: x (x == anything) On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00406 35th percentileScored 2026-11-07
Fix Partial gRPC (Google): 1.53io.grpc:grpc-protobuf (Maven): 1.53.0+2 more productsRed Hat: 1 advisoryRed Hat: 1 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GooglegRPC1.51 to before 1.531.53Patch availableCNA
—io.grpc:grpc-protobuf (Maven)1.51.0 to before 1.53.01.53.0Patch availableGHSA-6628-q6j9-w8vg
—grpcio (PyPI)1.51.0 to before 1.53.01.53.0Patch availableGHSA-6628-q6j9-w8vg
—grpc (RubyGems)1.51.0 to before 1.53.01.53.0Patch availableGHSA-6628-q6j9-w8vg
  • gRPC VendorGoogle Affected 1.51 to before 1.53 Fixed in 1.53 Patch available CNA
  • io.grpc:grpc-protobuf (Maven) Vendor— Affected 1.51.0 to before 1.53.0 Fixed in 1.53.0 Patch available GHSA-6628-q6j9-w8vg
  • grpcio (PyPI) Vendor— Affected 1.51.0 to before 1.53.0 Fixed in 1.53.0 Patch available GHSA-6628-q6j9-w8vg
  • grpc (RubyGems) Vendor— Affected 1.51.0 to before 1.53.0 Fixed in 1.53.0 Patch available GHSA-6628-q6j9-w8vg

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*1.51.0 to before 1.53.0Vulnerablegrpc
  • cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:* Versions 1.51.0 to before 1.53.0 Vulnerable ·grpc

Remediation

  • Fix · CNA gRPC (Google) Fixed in 1.53
  • Fix · GHSA-6628-q6j9-w8vg io.grpc:grpc-protobuf (Maven) Fixed in 1.53.0 Advisory →
  • Fix · GHSA-6628-q6j9-w8vg grpcio (PyPI) Fixed in 1.53.0 Advisory →
  • Fix · GHSA-6628-q6j9-w8vg grpc (RubyGems) Fixed in 1.53.0 Advisory →

Red Hat 1 advisory

  • RHSA-2024:10761 Released 2024-12-03 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-worker-playbook-0.1.10-1.el9_5

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 4AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:10761
Not affected: 51 products
  • Builds for Red Hat OpenShift
  • Cryostat 3
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • Kube Descheduler Operator
  • Logging Subsystem for Red Hat OpenShift
  • Logical Volume Manager Storage
  • Migration Toolkit for Applications 7
  • Migration Toolkit for Containers
  • Migration Toolkit for Virtualization
  • Multiarch Tuning Operator
  • Multicluster Engine for Kubernetes
  • Network Observability Operator
  • OpenShift API for Data Protection
  • OpenShift Developer Tools and Services
  • OpenShift Run Once Duration Override Operator
  • OpenShift Secondary Scheduler Operator
  • OpenShift Serverless
  • OpenShift Service Mesh 2
  • OpenShift Source-to-Image (S2I)
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Security 4
  • Red Hat Ceph Storage 5
  • Red Hat Ceph Storage 6
  • Red Hat Ceph Storage 7
  • Red Hat Connectivity Link 1
  • Red Hat Developer Hub 1
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Cluster Manager CLI
  • Red Hat OpenShift Container Platform 3.11
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform Assisted Installer 1
  • Red Hat OpenShift Data Science (RHODS)
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3
  • Red Hat OpenStack Platform 16.1
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat Openshift Container Storage 4
  • Red Hat Openshift Data Foundation 4
  • Red Hat Openshift Sandboxed Containers
  • Red Hat Satellite 6
  • Red Hat Service Interconnect 1
  • Red Hat Storage 3
  • Self Node Remediation Operator
  • cert-manager Operator for Red Hat OpenShift
  • mirror registry for Red Hat OpenShift

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-1428
  2. 2026-10-03 Alias added: GHSA-6628-q6j9-w8vg
  3. 2026-10-27 Affected versions changed · Red Hat

References

Patch 1

Advisory 1

Other 2

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 17247 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences