agentprime: apache-software-foundation-apache-brpc

agentprime: apache-software-foundation-apache-brpcEvery new CVE for apache-software-foundation-apache-brpc.https://agentprime.io/CVE-2026-90484: Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crashhttps://agentprime.io/advisories/CVE-2026-90484/https://agentprime.io/advisories/CVE-2026-90484/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:19:37 GMTCVECVE-2026-87849: Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsinghttps://agentprime.io/advisories/CVE-2026-87849/https://agentprime.io/advisories/CVE-2026-87849/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:18:29 GMTCVECVE-2026-86249: Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.authhttps://agentprime.io/advisories/CVE-2026-86249/https://agentprime.io/advisories/CVE-2026-86249/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:17:42 GMTCVEcriticalCVE-2026-86147: Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprofhttps://agentprime.io/advisories/CVE-2026-86147/https://agentprime.io/advisories/CVE-2026-86147/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:16:22 GMTCVECVE-2026-86146: Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsinghttps://agentprime.io/advisories/CVE-2026-86146/https://agentprime.io/advisories/CVE-2026-86146/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:15:26 GMTCVECVE-2026-84748: Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configurationhttps://agentprime.io/advisories/CVE-2026-84748/https://agentprime.io/advisories/CVE-2026-84748/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:14:28 GMTCVECVE-2026-84747: Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segmentshttps://agentprime.io/advisories/CVE-2026-84747/https://agentprime.io/advisories/CVE-2026-84747/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:13:28 GMTCVECVE-2026-84727: Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Messagehttps://agentprime.io/advisories/CVE-2026-84727/https://agentprime.io/advisories/CVE-2026-84727/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:11:48 GMTCVECVE-2026-82953: Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82953/https://agentprime.io/advisories/CVE-2026-82953/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:10:07 GMTCVECVE-2026-82942: Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82942/https://agentprime.io/advisories/CVE-2026-82942/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:07:15 GMTCVECVE-2026-82425: Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82425/https://agentprime.io/advisories/CVE-2026-82425/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:05:07 GMTCVECVE-2026-82231: Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift clienthttps://agentprime.io/advisories/CVE-2026-82231/https://agentprime.io/advisories/CVE-2026-82231/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:04:19 GMTCVECVE-2026-82230: Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parserhttps://agentprime.io/advisories/CVE-2026-82230/https://agentprime.io/advisories/CVE-2026-82230/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:03:04 GMTCVECVE-2026-82210: Apache bRPC: Remote denial of service (crash) via malformed stream feedback frameshttps://agentprime.io/advisories/CVE-2026-82210/https://agentprime.io/advisories/CVE-2026-82210/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:01:31 GMTCVECVE-2026-81755: Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Requesthttps://agentprime.io/advisories/CVE-2026-81755/https://agentprime.io/advisories/CVE-2026-81755/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:58:26 GMTCVECVE-2026-80463: Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassemblyhttps://agentprime.io/advisories/CVE-2026-80463/https://agentprime.io/advisories/CVE-2026-80463/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:57:30 GMTCVECVE-2026-79704: Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handlinghttps://agentprime.io/advisories/CVE-2026-79704/https://agentprime.io/advisories/CVE-2026-79704/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:56:20 GMTCVECVE-2026-78334: Apache bRPC: Missing Authentication for Streaming RPC Frameshttps://agentprime.io/advisories/CVE-2026-78334/https://agentprime.io/advisories/CVE-2026-78334/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:54:24 GMTCVEcriticalCVE-2026-78066: Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizeshttps://agentprime.io/advisories/CVE-2026-78066/https://agentprime.io/advisories/CVE-2026-78066/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:53:42 GMTCVECVE-2026-78058: Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Pathhttps://agentprime.io/advisories/CVE-2026-78058/https://agentprime.io/advisories/CVE-2026-78058/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:52:57 GMTCVECVE-2026-78048: Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoderhttps://agentprime.io/advisories/CVE-2026-78048/https://agentprime.io/advisories/CVE-2026-78048/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:51:58 GMTCVECVE-2026-74758: Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handlinghttps://agentprime.io/advisories/CVE-2026-74758/https://agentprime.io/advisories/CVE-2026-74758/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:48:23 GMTCVECVE-2026-74757: Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Counthttps://agentprime.io/advisories/CVE-2026-74757/https://agentprime.io/advisories/CVE-2026-74757/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:46:17 GMTCVECVE-2026-74755: Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-74755/https://agentprime.io/advisories/CVE-2026-74755/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:45:25 GMTCVECVE-2026-66392: Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Nameshttps://agentprime.io/advisories/CVE-2026-66392/https://agentprime.io/advisories/CVE-2026-66392/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:43:52 GMTCVECVE-2026-61916: Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platformshttps://agentprime.io/advisories/CVE-2026-61916/https://agentprime.io/advisories/CVE-2026-61916/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:42:46 GMTCVECVE-2026-61902: Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limitshttps://agentprime.io/advisories/CVE-2026-61902/https://agentprime.io/advisories/CVE-2026-61902/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:41:56 GMTCVECVE-2026-58064: Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocationhttps://agentprime.io/advisories/CVE-2026-58064/https://agentprime.io/advisories/CVE-2026-58064/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:41:13 GMTCVECVE-2026-56388: Apache bRPC: Out-of-Bounds Write in Redis Command Parserhttps://agentprime.io/advisories/CVE-2026-56388/https://agentprime.io/advisories/CVE-2026-56388/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:40:41 GMTCVEcriticalCVE-2026-56387: Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parserhttps://agentprime.io/advisories/CVE-2026-56387/https://agentprime.io/advisories/CVE-2026-56387/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:39:11 GMTCVECVE-2026-56386: Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parserhttps://agentprime.io/advisories/CVE-2026-56386/https://agentprime.io/advisories/CVE-2026-56386/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:37:47 GMTCVECVE-2026-54427: Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parserhttps://agentprime.io/advisories/CVE-2026-54427/https://agentprime.io/advisories/CVE-2026-54427/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:36:40 GMTCVECVE-2026-54426: Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parserhttps://agentprime.io/advisories/CVE-2026-54426/https://agentprime.io/advisories/CVE-2026-54426/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:32:19 GMTCVECVE-2026-54425: Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decodinghttps://agentprime.io/advisories/CVE-2026-54425/https://agentprime.io/advisories/CVE-2026-54425/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:31:19 GMTCVECVE-2026-48830: Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requestshttps://agentprime.io/advisories/CVE-2026-48830/https://agentprime.io/advisories/CVE-2026-48830/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:30:15 GMTCVEcriticalCVE-2025-60021: Apache bRPC: Remote command injection vulnerability in heap builtin servicehttps://agentprime.io/advisories/CVE-2025-60021/https://agentprime.io/advisories/CVE-2025-60021/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.26 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 08:39:23 GMTCVEcriticalCVE-2025-59789: Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parserhttps://agentprime.io/advisories/CVE-2025-59789/https://agentprime.io/advisories/CVE-2025-59789/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Dec 2025 10:22:41 GMTCVECVE-2025-54472: Apache bRPC: Redis Parser Remote Denial of Servicehttps://agentprime.io/advisories/CVE-2025-54472/https://agentprime.io/advisories/CVE-2025-54472/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Aug 2025 09:05:38 GMTCVECVE-2024-23452: Apache bRPC: HTTP request smuggling vulnerabilityhttps://agentprime.io/advisories/CVE-2024-23452/https://agentprime.io/advisories/CVE-2024-23452/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Feb 2024 09:00:04 GMTCVECVE-2023-45757: Apache bRPC: The builtin service rpcz page has an XSS attack vulnerabilityhttps://agentprime.io/advisories/CVE-2023-45757/https://agentprime.io/advisories/CVE-2023-45757/Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 08:01:41 GMTCVECVE-2023-31039: Apache bRPC: ServerOptions.pid_file may cause arbitrary code executionhttps://agentprime.io/advisories/CVE-2023-31039/https://agentprime.io/advisories/CVE-2023-31039/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 May 2023 08:57:14 GMTCVEcritical