CVE-2017-7860: Buffer Overflow
Published Apr 14, 2017
·Updated
Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parseunix function in core/ext/clientchannel/parseaddress.c.
Affected Software
1 affected component
gRPC gRPC<=1.1.2
Remediation
Patch Available
Event History
Apr 14, 2017
CVE Published
via MITRE·04:30 AM
Data Sourced
via MITRE·04:30 AM
Description
Data Sourced
via NVD·04:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-7860?
CVE-2017-7860 has been classified as a high severity vulnerability due to its potential to cause a heap-based buffer overflow.
2
How do I fix CVE-2017-7860?
To fix CVE-2017-7860, update gRPC to version 1.1.3 or later, which addresses the vulnerability.
3
What software is affected by CVE-2017-7860?
CVE-2017-7860 affects all versions of gRPC prior to version 1.1.3.
4
What type of vulnerability is CVE-2017-7860?
CVE-2017-7860 is an out-of-bounds write vulnerability caused by a heap-based buffer overflow.
5
Which function is responsible for CVE-2017-7860?
The vulnerability is related to the parse_unix function in the file core/ext/client_channel/parse_address.c.