Vulnerability RUSTSEC-2021-0109
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 years ago
July 25, 2021 at 12:00 PM UTC
Process crashes when the cell used as DepGroup is not alive
0.1.0 - 0.39.1
0.1.0 - 0.39.1
Summary
Process crashes when the cell used as DepGroup is not alive
Details
It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Nervos CKB Permit load cell data from memory
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
0.37.0 - 0.38.0 GHSA-29c2-65rj-h343
Medium Risk
2 years ago
Nervos CKB Pool does not remove the conflicting transactions from the statistics
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
0.1.0 - 0.39.1 GHSA-h4c3-5275-vrmg
Critical
2 years ago
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
0.1.0 GHSA-q73f-w3h7-7wcc
0.1.0 GHSA-q73f-w3h7-7wcc
High Risk
2 years ago
Nervos CKB Snappy decompress length can be very large and causes out of memory error
0.1.0 GHSA-3gjh-29fv-8hr6
0.1.0 GHSA-3gjh-29fv-8hr6
High Risk
2 years ago
Nervos CKB Panic on malformed input
0.1.0 GHSA-wjxc-pjx9-4wvm
0.1.0 GHSA-wjxc-pjx9-4wvm
Impacted packages
Timeline
Published
5 years ago
July 25, 2021 at 12:00 PM UTC
Fixed (0.40.0)
5 years ago
February 24, 2021 at 04:37 AM UTC
Last Modified
1 hour ago
October 12, 2026 at 06:00 PM UTC