{"action":"Upgrade grpcio to 1.3.0 or later.","affected":[{"fixed":"1.3.0","introduced":"0"}],"component":"grpcio","cve_ids":["CVE-2017-8359"],"ecosystem":"PyPI","epss":0.03077,"exploited":false,"fixed_versions":["1.3.0"],"id":"tcs_01M5KG702VMXJXG26RMHJTMPXA","modified_at":"2023-11-08T03:59:27.803334Z","published_at":"2017-04-30T17:59:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-101","https://github.com/grpc/grpc/pull/10353","https://github.com/grpc/grpc/commit/6544a2d5d9ecdb64214da1d228886a7d15bbf5c7","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=726","http://www.securityfocus.com/bid/98280","https://pypi.org/project/grpcio","https://nvd.nist.gov/vuln/detail/CVE-2017-8359"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2017-101","url":"https://osv.dev/vulnerability/PYSEC-2017-101"}],"summary":"Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c."}