CVE-2021-47130 nvmet: fix freeing unallocated p2pmem

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix freeing unallocated p2pmem In case p2p device was found but the p2p pool is empty, the nvme target is still trying to free the sgl from the p2p pool instead of the regular sgl pool and causing a crash BUG is called...

CVE-2021-47130

The CVE refers to a Linux kernel fix in nvmet: when a p2p device is found but the p2p pool is empty, the nvme target incorrectly freed the sgl from the p2p pool, leading to a BUG() crash. The fix ensures the nvme request only uses the p2p_dev if it was allocated from the p2p pool, avoiding freein...

CVE-2021-47130 nvmet: fix freeing unallocated p2pmem

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix freeing unallocated p2pmem In case p2p device was found but the p2p pool is empty, the nvme target is still trying to free the sgl from the p2p pool instead of the regular sgl pool and causing a crash BUG is called...

CVE-2021-47130

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix freeing unallocated p2pmem In case p2p device was found but the p2p pool is empty, the nvme target is still trying to free the sgl from the p2p pool instead of the regular sgl pool and causing a crash BUG is called...

GHSA-PR39-8257-FXC2 Nervos CKB DoS: Process exists when p2p discovery protocol receives unsupported peer IP

The p2p discovery protocol assumes that the peer IP must be valid IPv4 address...

Nervos CKB DoS: Process exists when p2p discovery protocol receives unsupported peer IP

The p2p discovery protocol assumes that the peer IP must be valid IPv4 address...

Nervos CKB P2P DoS Attacks

The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted txhashes, it will mark it in memory to avoid duplicated requests. code → . It is easy to establish a DoS attach by generating random tx hashes. Impact It affects all nodes connected to the P2P...

GHSA-84X2-2QV6-QG56 Nervos CKB P2P DoS Attacks

The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted txhashes, it will mark it in memory to avoid duplicated requests. code → . It is easy to establish a DoS attach by generating random tx hashes. Impact It affects all nodes connected to the P2P...

PT-2024-40412 · Crates.Io · Ckb

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The p2p discovery protocol has an issue where it assumes that the peer IP must be a valid IPv4 address. Recommendations: At the moment, there is no information about a newer version tha...

CVE-2023-33109

Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...

Design/Logic Flaw

Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...

CVE-2023-33109 NULL Pointer Dereference in WLAN Firmware

Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...

CVE-2023-33109 NULL Pointer Dereference in WLAN Firmware

Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...

Memory Exhaustion

go-ethereum is vulnerable to a memory consumption. The vulnerability is due to a node which can be made to consume unbounded amounts of memory when handling a malicious crafted p2p messages sent from an attacker node. The attacker could use this issue to cause memory exhaustion leading to Denial ...

GHSA-PPJG-V974-84CM Go-Ethereum vulnerable to denial of service via malicious p2p message

Impact A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. Details The p2p handler spawned a new goroutine to respond to ping requests. By flooding a node with ping requests, an unbounded number of goroutin...

Design/Logic Flaw

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...

CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...

CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...

PT-2023-27526 · Unknown · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: go-ethereum geth versions prior to 1.12.1-stable Description: A vulnerable node can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. This occurs because the p2p handler...

Library Management System Code Issue Vulnerability

Library Management System is a library management system with QR code attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management Systems SLIMS 9 Bulian v9.6.1, which stems from susceptibility to server-si...