Vulnerability GHSA-wjxc-pjx9-4wvm
High Risk
HIGH RISK
CVSS Score: 8.0
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
2 years ago
February 03, 2024 at 12:18 AM UTC
Nervos CKB Panic on malformed input
0.1.0
0.1.0
Summary
Nervos CKB Panic on malformed input
Details
Impact
CKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages
References
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Nervos CKB Permit load cell data from memory
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
Medium Risk
2 years ago
Nervos CKB Pool does not remove the conflicting transactions from the statistics
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
Critical
2 years ago
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
0.1.0 GHSA-q73f-w3h7-7wcc
0.1.0 GHSA-q73f-w3h7-7wcc
High Risk
2 years ago
Nervos CKB Snappy decompress length can be very large and causes out of memory error
0.1.0 GHSA-3gjh-29fv-8hr6
0.1.0 GHSA-3gjh-29fv-8hr6
High Risk
2 years ago
Nervos CKB node panics when processing a block which parent timestamp is too new
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1 GHSA-hjqq-29pw-96wj
>=0.33.0 <0.33.2, >=0.34.0 <0.34.1 GHSA-hjqq-29pw-96wj
Impacted packages
Timeline
Published
2 years ago
February 03, 2024 at 12:18 AM UTC
Last Modified
2 years ago
February 03, 2024 at 12:18 AM UTC