EUVD-2024-54372

Malicious code in bioql PyPI...

CVE-2024-58131

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...

CVE-2024-58131

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...

FISCO BCOS 安全漏洞

FISCO BCOS is a blockchain underlying platform open-sourced by FISCO BCOS. A security vulnerability exists in FISCO BCOS version 3.11.0 that stems from a transaction pool synchronization issue...

CVE-2024-58131

CVE-2024-58131 affects FISCO BCOS 3.11.0. The cited documents describe a vulnerability in the transaction pool synchronization that can be observed when a malicious node (one that has modified the codebase to allow a large min_seal_time value) joins a blockchain network, potentially causing incon...

CVE-2024-58131

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...

CVE-2024-58131

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...

PT-2025-15083 · Unknown · Fisco-Bcos

Name of the Vulnerable Software and Affected Versions: FISCO BCOS version 3.11.0 Description: The issue is related to the synchronization of the transaction pool, which can be observed when a malicious node joins a blockchain network. This malicious node has modified the codebase to allow a large...

CVE-2024-58131: Incorrect Synchronization

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...

CVE-2024-58131

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...

The fuels-ts typescript SDK has no awareness of to-be-spent transactions

Brief/Intro The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The Typescript SDK provides the fund function which retrieves UTXOs, which belong to the owner and can be used to fund t...

PT-2024-29653 · Fuels-Ts · Fuels-Ts

Name of the Vulnerable Software and Affected Versions: fuels-ts affected versions not specified Description: The typescript SDK has no awareness of to-be-spent transactions, causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. This issue occurs...

Nervos CKB Pool does not remove the conflicting transactions from the statistics

Impact There's a bug in the pool statistics that when conflicting transactions are removed from the pool, they are not subtracted from the statics. Finally, the transaction pool keeps full and reject all transactions. Patches 0.39.2 Workarounds Restart the CKB node...

PT-2024-40310 · Ckb · Ckb

Name of the Vulnerable Software and Affected Versions: CKB node versions prior to 0.39.2 Description: A bug in the pool statistics causes conflicting transactions to not be subtracted when removed from the pool, leading to the transaction pool becoming full and rejecting all transactions...

PT-2021-24272

Name of the Vulnerable Software and Affected Versions: ckb crate versions prior to 0.40.0 Description: An issue was discovered in the ckb crate where a get block template RPC call may fail when selecting a Nervos CKB blockchain transaction with a higher fee rate than another transaction. This...

CVE-2005-2970

Memory leak in the worker MPM worker.c for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other connections...