Denial Of Service (DoS)

github.com/ipfs/go-unixfs is vulnerable to Denial Of Service DoS. The vulnerability exists because hamt.go doesn't properly handle malformed HAMT structures while reading data in the bogus fanout parameter in the HAMT directory nodes, which leads to memory leaks, allowing an attacker to cause an...

CVE-2023-23625: Uncontrolled Resource Consumption

go-unixfs is an implementation of a unix-like filesystem on top of an ipld merkledag. Trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by bogus fanout paramete...