github.com/ipfs/go-unixfsnode is an ADL IPLD prime node that wraps go-codec-dagpb's implementation of protobuf to enable pathing. In versions prior to 1.5.2, reading malformed HAMT sharded directories can cause panics and virtual memory leaks. An attacker can trigger a panic by exploiting this vulnerability. Upgrade recommended
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
![]() | CVE-2023-23631 | 9 Feb 202321:15 | – | osv |
![]() | IPFS go-unixfsnode subject to DOS via HAMT Decoding Panics | 10 Feb 202319:54 | – | osv |
![]() | Denial of service via HAMT decoding panic in github.com/ipfs/go-unixfsnode | 14 Feb 202319:41 | – | osv |
![]() | CVE-2023-23631 HAMT Decoding Panics in github.com/ipfs/go-unixfsnode | 9 Feb 202320:46 | – | vulnrichment |
![]() | IPFS go-unixfsnode subject to DOS via HAMT Decoding Panics | 10 Feb 202319:54 | – | github |
![]() | CVE-2023-23631 | 9 Feb 202321:15 | – | nvd |
![]() | Denial Of Service (DoS) | 14 Feb 202309:14 | – | veracode |
![]() | Design/Logic Flaw | 9 Feb 202321:15 | – | prion |
![]() | CVE-2023-23631 HAMT Decoding Panics in github.com/ipfs/go-unixfsnode | 9 Feb 202320:46 | – | cvelist |
[
{
"vendor": "ipfs",
"product": "go-unixfsnode",
"versions": [
{
"version": "< 1.5.2",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo