Threats tagged 'ghsa-gjf5-p37j-frg4'

A reachable-assertion vulnerability exists in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC versions prior to 1.18.0. This flaw allows a remote attacker to crash the server by sending a crafted sequence of HPACK headers, causing a denial of service. The issue arises from incorrect sizing of the dynamic-table ring buffer, leading to an assertion failure during header processing.