{"id":44073,"date":"2026-10-22T04:39:59","date_gmt":"2026-10-21T20:39:59","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-82210"},"modified":"2026-10-22T04:39:59","modified_gmt":"2026-10-21T20:39:59","slug":"cve-2026-82210","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-82210","title":{"rendered":"CVE-2026-82210 &#8211; Enforceable assertion in the streaming feature of Apache bRPC (version &lt; 1.18.0) on all pl"},"content":{"rendered":"<p>Enforceable assertion in the streaming feature of Apache bRPC (version  0) and unconditionally asserts CHECK(buf.IsEmpty()) on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled (cur_buf_size == 0), reaches these assertions. On failure, CHECK failures abort the process, allowing an unauthenticated single client (once a stream is established) to terminate the server and cause a denial of service.<\/p>\n<p>Affected Scenarios:<br \/>\nUse bRPC server with the streaming control feature (Stream API) served from untrusted network.<\/p>\n<p>How to Fix:<br \/>\n1. Upgrade bRPC to version 1.18.0, which fixes this issue.<br \/>\n2. Apply this patch:  https:\/\/github.com\/apache\/brpc\/pull\/3494 <\/p>\n<p>The fix rejects malformed feedback frames with EPROTO and closes only the affected stream instead of crashing the whole process, and it bounds buffer shrinking so cur_buf_size never drops to 0 while flow control is enabled.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enforceable assertion in the streaming feature of Apache bRPC (version &lt; 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a malformed stream feedback frame.<\/p>\n<p>Ro<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-44073","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/44073","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=44073"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=44073"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=44073"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}