SUSE: CVE-2023-32732: SUSE Linux Security Advisory
4
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
06/09/2023
02/23/2024
02/22/2024
02/23/2024
Description
gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit in https://github.com/grpc/grpc/pull/32309 https://www.google.com/url
Solution(s)
- suse-upgrade-abseil-cpp-devel
- suse-upgrade-grpc-devel
- suse-upgrade-grpc-source
- suse-upgrade-libabsl2308_0_0
- suse-upgrade-libabsl2308_0_0-32bit
- suse-upgrade-libgrpc-1_60
- suse-upgrade-libgrpc1_60
- suse-upgrade-libgrpc37
- suse-upgrade-libprotobuf-lite25_1_0
- suse-upgrade-libprotobuf-lite25_1_0-32bit
- suse-upgrade-libprotobuf25_1_0
- suse-upgrade-libprotobuf25_1_0-32bit
- suse-upgrade-libprotoc25_1_0
- suse-upgrade-libprotoc25_1_0-32bit
- suse-upgrade-libre2-11
- suse-upgrade-libre2-11-32bit
- suse-upgrade-libupb37
- suse-upgrade-opencensus-proto-source
- suse-upgrade-protobuf-devel
- suse-upgrade-protobuf-java
- suse-upgrade-python311-abseil
- suse-upgrade-python311-grpcio
- suse-upgrade-python311-protobuf
- suse-upgrade-re2-devel
- suse-upgrade-upb-devel
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center