1044 matches found
PT-2024-40182
Name of the Vulnerable Software and Affected Versions: CKB affected versions not specified Description: The issue is related to the P2P protocols lacking rate limits. Specifically, in the relay protocol, when a node receives a broadcasted tx hashes, it marks them in memory to avoid duplicated...
CVE-2023-33109
Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...
Design/Logic Flaw
Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...
CVE-2023-33109 NULL Pointer Dereference in WLAN Firmware
Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...
CVE-2023-33109 NULL Pointer Dereference in WLAN Firmware
Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...
CVE-2023-33109: NULL Pointer Dereference
Transient DOS while processing a WMI P2P listen start command 0xD00A sent from host...
Memory Exhaustion
go-ethereum is vulnerable to a memory consumption. The vulnerability is due to a node which can be made to consume unbounded amounts of memory when handling a malicious crafted p2p messages sent from an attacker node. The attacker could use this issue to cause memory exhaustion leading to Denial ...
GHSA-PPJG-V974-84CM Go-Ethereum vulnerable to denial of service via malicious p2p message
Impact A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. Details The p2p handler spawned a new goroutine to respond to ping requests. By flooding a node with ping requests, an unbounded number of goroutin...
Design/Logic Flaw
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
CVE-2023-40591
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version "1.12.1-stable", i.e,...
CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
PT-2023-27526 · Unknown · Go-Ethereum
Name of the Vulnerable Software and Affected Versions: go-ethereum geth versions prior to 1.12.1-stable Description: A vulnerable node can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. This occurs because the p2p handler...
CVE-2023-40591: Uncontrolled Resource Consumption
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
Library Management System Code Issue Vulnerability
Library Management System is a library management system with QR code attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management Systems SLIMS 9 Bulian v9.6.1, which stems from susceptibility to server-si...
P2PInfect: Self-Replicating Worm Hits Redis Instances
By Waqas Known as 'P2PInfect,' the worm exploits a critical vulnerability to infiltrate Redis instances and assimilates them into a larger P2P network, enabling it to spread rapidly. This is a post from HackRead.com Read the original post: P2PInfect: Self-Replicating Worm Hits Redis Instances...
K000135433: WPA use-after-free vulnerability CVE-2021-27803
Security Advisory Description A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...
CVE-2023-34451
CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...
CVE-2023-34451 CometBFT may duplicate transactions in the mempool's data structures
CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...
Cybercriminals Hijacking Vulnerable SSH Servers in New Proxyjacking Campaign
An active financially motivated campaign is targeting vulnerable SSH servers to covertly ensnare them into a proxy network. "This is an active campaign in which the attacker leverages SSH for remote access, running malicious scripts that stealthily enlist victim servers into a peer-to-peer P2P...