Vulnerability GHSA-29c2-65rj-h343
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
2 years ago
February 03, 2024 at 12:29 AM UTC
Nervos CKB Permit load cell data from memory
0.37.0 - 0.38.0
0.37.0 - 0.38.0
Summary
Nervos CKB Permit load cell data from memory
Details
Impact
The faulty nodes will reject transactions which calls load_cell_data syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation.
Patches
0.35.2, 0.36.1, 0.37.1, 0.38.2
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Nervos CKB Pool does not remove the conflicting transactions from the statistics
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
Critical
2 years ago
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
0.1.0 GHSA-q73f-w3h7-7wcc
0.1.0 GHSA-q73f-w3h7-7wcc
High Risk
2 years ago
Nervos CKB Snappy decompress length can be very large and causes out of memory error
0.1.0 GHSA-3gjh-29fv-8hr6
0.1.0 GHSA-3gjh-29fv-8hr6
High Risk
2 years ago
Nervos CKB Panic on malformed input
0.1.0 GHSA-wjxc-pjx9-4wvm
0.1.0 GHSA-wjxc-pjx9-4wvm
High Risk
2 years ago
Nervos CKB node panics when processing a block which parent timestamp is too new
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1 GHSA-hjqq-29pw-96wj
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1 GHSA-hjqq-29pw-96wj
Impacted packages
Timeline
Published
2 years ago
February 03, 2024 at 12:29 AM UTC
Fixed (0.39.0)
5 years ago
January 07, 2021 at 05:07 AM UTC
Last Modified
2 years ago
February 03, 2024 at 12:29 AM UTC