{"id":"CVE-2017-8359","details":"Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.","aliases":["PYSEC-2017-101"],"modified":"2026-09-18T14:05:38.265451Z","published":"2017-04-30T17:59:00.997Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/98280"},{"type":"FIX","url":"https://github.com/grpc/grpc/pull/10353"},{"type":"EVIDENCE","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=726"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/grpc/grpc","events":[{"introduced":"0"},{"last_affected":"c25267fd7dc3d549ef8aace4909c95eac9b0cca9"}],"database_specific":{"cpe":"cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.2.1"}],"source":"CPE_RANGE"}}],"versions":["v1.2.1","v1.2.0","v1.2.0-pre2","release-0_9_1-objectivec-0.5.1","release-0_9_0","release-0_6_0","release-0_6","release_test"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-8359.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/grpc/grpc-go","events":[{"introduced":"0"},{"last_affected":"8050b9cbc271307e5a716a9d782803d09b0d6f2d"}],"database_specific":{"cpe":"cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.2.1"}],"source":"CPE_RANGE"}}],"versions":["v1.2.1","v1.2.0","v1.0.5","v1.0.4","v1.0.3","v1.0.2","v1.0.1-GA","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-8359.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/grpc/grpc-kotlin","events":[{"introduced":"0"},{"last_affected":"5fb5efffb108d71e711ae92548c32c69b6439eff"}],"database_specific":{"cpe":"cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.2.1"}],"source":"CPE_RANGE"}}],"versions":["v1.2.1","v1.2.0","v1.1.0","v1.0.0","v0.2.1","v0.2.0","v0.1.5","v0.1.4","v0.1.3","v0.1.2","v0.1.1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-8359.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/grpc/grpc-web","events":[{"introduced":"0"},{"last_affected":"3d921fffb7ce29f03329e411711d0751328c761a"}],"database_specific":{"cpe":"cpe:2.3:a:grpc:grpc:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.2.1"}],"source":"CPE_RANGE"}}],"versions":["1.2.1","1.2.0","1.1.0","1.1.0-rc.1","1.0.7","1.0.6","1.0.5","1.0.4","1.0.3","1.0.2","1.0.1","1.0.0","0.4.0","0.3.0","0.2.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-8359.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}