CVE-2024-11407: Denial of Service through Data corruption in gRPC-C++
Denial of Service through Data corruption in gRPC-C++
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/grpcto a version that resolves this vulnerability.Fixed in 1.51.1-3Fixed in 1.51.1-6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch e9046b2bbebc0cb7f5dc42008f807f6c7e98e791
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11407?
CVE-2024-11407 has been classified as a denial of service vulnerability due to potential data corruption in gRPC-C++.
How do I fix CVE-2024-11407?
To fix CVE-2024-11407, you should update to the latest version of gRPC-C++ that addresses this vulnerability.
What versions of gRPC-C++ are affected by CVE-2024-11407?
CVE-2024-11407 affects gRPC-C++ versions prior to the commit e9046b2bbebc0cb7f5dc42008f807f6c7e98e791.
What is the impact of CVE-2024-11407 on gRPC-C++ applications?
The impact of CVE-2024-11407 includes potential data corruption and denial of service in gRPC-C++ applications with transmit zero copy enabled.
Is there a workaround for CVE-2024-11407?
Currently, the recommended action for CVE-2024-11407 is to apply the latest updates, as there are no known effective workarounds.