Vulnerability GHSA-q73f-w3h7-7wcc
Critical
CRITICAL RISK
CVSS Score: 9.5
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
2 years ago
February 03, 2024 at 12:18 AM UTC
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
0.1.0
0.1.0
Summary
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
Details
Impact
Tx-pool verify transaction which inputs' script contains load_cell_data_hash is nondeterministic
Workarounds
Enforce tx-pool ResolvedTrascation inputs' load data is none.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Nervos CKB Permit load cell data from memory
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
Medium Risk
2 years ago
Nervos CKB Pool does not remove the conflicting transactions from the statistics
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
High Risk
2 years ago
Nervos CKB Snappy decompress length can be very large and causes out of memory error
0.1.0 GHSA-3gjh-29fv-8hr6
0.1.0 GHSA-3gjh-29fv-8hr6
High Risk
2 years ago
Nervos CKB Panic on malformed input
0.1.0 GHSA-wjxc-pjx9-4wvm
0.1.0 GHSA-wjxc-pjx9-4wvm
High Risk
2 years ago
Nervos CKB node panics when processing a block which parent timestamp is too new
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1 GHSA-hjqq-29pw-96wj
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1 GHSA-hjqq-29pw-96wj
Impacted packages
Timeline
Published
2 years ago
February 03, 2024 at 12:18 AM UTC
Last Modified
2 years ago
February 03, 2024 at 12:18 AM UTC