UBUNTU-CVE-2023-32732
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 09 Jun 2023, 11:15
Last modified:20 May 2026, 16:13
Vulnerability Summary
Overall Risk (default)
low
21/100 CVSS Score
5.3 MEDIUM
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Jun 2023, 11:15
Published
Vulnerability first disclosed
20 May 2026, 16:13
Last Modified
Vulnerability information updated
Description
gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit in https://github.com/grpc/grpc/pull/32309 https://www.google.com/url
CVSS Metrics
- v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Systems
- ubuntu•grpc
all | all | all | all | all | all | all