PT-2020-21094

Name of the Vulnerable Software and Affected Versions ipfs-bitswap versions prior to 0.24.1 Description The issue allows for a Denial of Service DoS due to the package putting unwanted blocks in the blockstore, potentially exhausting system resources under specific conditions. Recommendations...

Denial Of Service (DoS)

ipfs-bitswap is vulnerable to denial of service DoS. The library does not ignore the unwanted blocks from the block store during the invocation of multiple functions, allowing a malicious user to cause an application crash...

Denial of Service

Overview Versions of ipfs-bitswap prior to 0.24.1 are vulnerable to Denial of Service DoS. The package put unwanted blocks in the blockstore, which could be used to exhaust system resources in specific conditions. Recommendation Upgrade to version 0.24.1 or later. References - GitHub PR - Snyk...