Vulnerability Assessment- CVE-2023-33953

[VIJAYABALAN G]

We are using gRPC java implementation in many of our applications across  organization. Recently, we came to know about the vulnerability as mentioned in the subject. Please help to clarify the following points.

1. Is this vulnerability limited to C++ implementation? 

2. We are using gRPC v1.37.1 (java). Is java implementation is also impacted?

---------- Forwarded message ---------
From: VIJAYABALAN G <vijaya...@gmail.com>
Date: Fri, 8 Sept 2023, 12:18 pm
Subject: Vulnerability Assessment- CVE-2023-33953
To: <in...@cncf.io>

Dear team,

Trust you are well!!

We are using gRPC java implementation in many of our applications across  organization. Recently, we came to know about the vulnerability as mentioned in the subject. Please help to clarify the following points.

1. Is this vulnerability limited to C++ implementation? 

2. We are using gRPC v1.37.1 (java). Is java implementation is also impacted?

[VIJAYABALAN G]

Can I have an update on this please?

[Sanjay Pujare]

This issue should answer your question https://github.com/grpc/grpc-java/issues/10553 .

--
You received this message because you are subscribed to the Google Groups "grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/CAF4%3Dm6iAsnd6WgXjzZMYWe01_ac6k2yQdK9X0T8%2BRfCcmVfzug%40mail.gmail.com.