9686 matches found
CVE-2023-33168 Remote Procedure Call Runtime Denial of Service Vulnerability
...
CVE-2023-33167
Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.
CVE-2023-33167 Remote Procedure Call Runtime Denial of Service Vulnerability
...
Remote Procedure Call Runtime Denial of Service Vulnerability
...
Remote Procedure Call Runtime Denial of Service Vulnerability
...
Remote Procedure Call Runtime Denial of Service Vulnerability
...
Remote Procedure Call Runtime Denial of Service Vulnerability
...
GO-2023-1882 Deadlock in github.com/cometbft/cometbft/consensus
An internal modification to the way PeerState is serialized to JSON introduced a deadlock when the new function MarshalJSON is called. This function can be called in two ways. The first is via logs, by setting the consensus logging module to "debug" level which should not happen in production, an...
CometBFT may duplicate transactions in the mempool's data structures
Impact The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time in the sense that the map tracks the index if any of the transaction in the list. Unfortunately, it is possible to have...
GHSA-W24W-WP77-QFFM CometBFT may duplicate transactions in the mempool's data structures
Impact The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time in the sense that the map tracks the index if any of the transaction in the list. Unfortunately, it is possible to have...
CometBFT PeerState JSON serialization deadlock
Impact An internal modification to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is called. This function can be called from two places: 1. Via logs Setting the consensus logging module to "debug" level should not happen in production, and...
GHSA-MVJ3-QRQH-CJVR CometBFT PeerState JSON serialization deadlock
Impact An internal modification to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is called. This function can be called from two places: 1. Via logs Setting the consensus logging module to "debug" level should not happen in production, and...
EulerOS 2.0 SP11 : samba (EulerOS-SA-2023-2276)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special...
EulerOS 2.0 SP11 : samba (EulerOS-SA-2023-2300)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-2276)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-2300)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-34450
CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is...
Code injection
CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...
Format string
CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is...
CVE-2023-34450
CometBFT (CVE-2023-34450) describes a deadlock in PeerState JSON serialization introduced by a change in versions 0.34.28 and 0.37.1. The deadlock can be triggered either by logging to JSON (consensus module set to debug) or by the RPC dump_consensus_state, potentially halting the node. The issue...