Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-8391

Eclipse Vert.x gRPC server does not limit the maximum message size

Description

In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client).  This is fixed in the 4.5.10 version.  Note this does not affect the Vert.x gRPC server based grpc-java and Netty libraries (Maven GAV: io.vertx:vertx-grpc)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation Eclipse Vert.x

Default version status: unaffected

  • 4.3.0 to < 4.5.10affected

References