Executive Summary

This vulnerability exists in the elixir-grpc grpc server where the function 'Elixir.GRPC.Server.Adapters.Cowboy.Handler:read_full_body/3' accumulates incoming request data into a single binary without any size limit.

If a client sends a large or slow-trickle unary request body, the server keeps accumulating data indefinitely because there is no cap on the size.

Additionally, if the client does not provide a grpc-timeout header, the read timeout for each chunk is set to infinity, allowing the client to keep the connection alive indefinitely while memory usage grows.

As a result, an unauthenticated attacker can exhaust the server's memory with just a single connection, causing the BEAM virtual machine to crash.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to a denial of service (DoS) condition by allowing an attacker to exhaust the server's memory resources.

Because the server crashes when memory is exhausted, legitimate users will be unable to access the service until it is restarted or recovered.

The attack requires no authentication and can be executed with a single connection, making it easy to exploit.

Useful 0 Not Useful 0