CVE-2020-11090

2020-06-1100:15:22

Google

osv.dev

0.002 Low

EPSS

Percentile

54.3%

JSON

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. This is fixed in version 1.12.3.

CPENameOperatorVersion
indy-nodeeq1.3.54-stable
indy-nodeeq0.3.16-stable
indy-nodeeq1.12.2
indy-nodeeq1.6.70-stable
indy-nodeeq1.6.78-stable
indy-nodeeq1.9.0
indy-nodeeq1.3.55-stable
indy-nodeeq1.11.0
indy-nodeeq1.1.43-stable
indy-nodeeq1.3.52-stable

Name	Operator	Version
indy-node	eq	1.3.54-stable
indy-node	eq	0.3.16-stable
indy-node	eq	1.12.2
indy-node	eq	1.6.70-stable
indy-node	eq	1.6.78-stable
indy-node	eq	1.9.0
indy-node	eq	1.3.55-stable
indy-node	eq	1.11.0
indy-node	eq	1.1.43-stable
indy-node	eq	1.3.52-stable