CVE-2017-7860

Critical

Published: 14/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client_channel/parse_address.c.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, threatening the integrity and confidentiality of data in applications using gRPC.

Recommendation

It is recommended to update gRPC to a version after February 22, 2017, to mitigate this vulnerability.

Original NVD description (English source)

Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client_channel/parse_address.c.