CVE-2023-34450

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct "PeerState" is serialized to JSON introduced a deadlock when new function MarshallJSON is...

CVE-2023-34450 CometBFT PeerState JSON serialization deadlock

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is...

CometBFT 安全漏洞

CometBFT is a Byzantine Fault Tolerant BFT middleware that employs stateful transducers written in any programming language and can be safely replicated on many machines. A security vulnerability exists in CometBFT versions v0.34.28, v0.37.1 that stems from the introduction of a deadlock when...

CVE-2023-34450: Missing Release of Memory after Effective Lifetime

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is...