Vulnerability GHSA-hjqq-29pw-96wj
High Risk
HIGH RISK
CVSS Score: 8.0
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
2 years ago
February 02, 2024 at 10:23 PM UTC
Nervos CKB node panics when processing a block which parent timestamp is too new
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1
Summary
Nervos CKB node panics when processing a block which parent timestamp is too new
Details
Impact
Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future.
Patches
Please upgrade to v0.34.1
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Nervos CKB Permit load cell data from memory
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
Medium Risk
2 years ago
Nervos CKB Pool does not remove the conflicting transactions from the statistics
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
Critical
2 years ago
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
0.1.0 GHSA-q73f-w3h7-7wcc
0.1.0 GHSA-q73f-w3h7-7wcc
High Risk
2 years ago
Nervos CKB Snappy decompress length can be very large and causes out of memory error
0.1.0 GHSA-3gjh-29fv-8hr6
0.1.0 GHSA-3gjh-29fv-8hr6
High Risk
2 years ago
Nervos CKB Panic on malformed input
0.1.0 GHSA-wjxc-pjx9-4wvm
0.1.0 GHSA-wjxc-pjx9-4wvm
Impacted packages
Timeline
Published
2 years ago
February 02, 2024 at 10:23 PM UTC
Last Modified
2 years ago
February 02, 2024 at 10:23 PM UTC