A recent scan identified 5,197 internet-facing Apache bRPC servers vulnerable due to 35 newly disclosed flaws, with 16 rated high and 19 moderate, fixed in version 1.18.0. The vulnerabilities affect various protocol parsers and can lead to server crashes, memory exhaustion, and unauthorized access, though the client-side aspects are not externally measurable. While server counts provide an observable metric for potential deployment size and track patching trends, they do not capture the full scope of affected systems, including internal clients. Mitigation involves upgrading to version 1.18.0 or applying specific patches and restricting public access to built-in services.
Read the full article at DEV Community
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
