CVE-2021-35041

2021-06-2400:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.3%

JSON

The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format and cannot be decoded by the node correctly. As a result, the node may consume the memory sustainably and crash. More details are shown at: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/1951

CPENameOperatorVersion
fisco-bcoseq2.7.2
fisco-bcoseq2.0.0-rc2
fisco-bcoseq2.6.0
fisco-bcoseq2.3.0
fisco-bcoseq2.0.0-rc1
fisco-bcoseq2.0.0-rc3
fisco-bcoseq2.0.0
fisco-bcoseq2.1.0
fisco-bcoseq2.7.0
fisco-bcoseq2.7.1

Name	Operator	Version
fisco-bcos	eq	2.7.2
fisco-bcos	eq	2.0.0-rc2
fisco-bcos	eq	2.6.0
fisco-bcos	eq	2.3.0
fisco-bcos	eq	2.0.0-rc1
fisco-bcos	eq	2.0.0-rc3
fisco-bcos	eq	2.0.0
fisco-bcos	eq	2.1.0
fisco-bcos	eq	2.7.0
fisco-bcos	eq	2.7.1

Rows per page:

1-10 of 151

References

github.com/FISCO-BCOS/FISCO-BCOS/issues/1951