Lucene search
+L

9 matches found

NVD
NVD
•added 2026/08/07 11:17 p.m.•28 views

CVE-2026-52879

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS0.00488EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/07 10:36 p.m.•80 views

CVE-2026-52879 Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS0.00488EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/07 10:36 p.m.•30 views

CVE-2026-52879

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS8.3AI score0.00488EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2026/08/07 10:36 p.m.•25 views

CVE-2026-52879 Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS5.9AI score
SaveExploits0References4
Mend
Mend
•added 2026/08/07 10:36 p.m.•13 views

CVE-2026-52879

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

8.7CVSS8.2AI score0.00488EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/07 10:36 p.m.•15 views

CVE-2026-52879 Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS8.2AI score0.00488EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 10:36 p.m.•30 views

EUVD-2026-54720

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS8.3AI score0.00488EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2026/06/05 4:41 p.m.•27 views

GHSA-HF2G-6J7H-98WG klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Summary networkMessenger.directMessageHandler in network/p2p/libp2p/netMessenger.go spawns a fresh goroutine for every incoming direct message before the antiflood layer makes an admission decision. There is no semaphore, throttler, or bound on concurrent in-flight spawns. A single connected libp...

7.5CVSS8.3AI score0.00488EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/06/05 4:41 p.m.•48 views

klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Summary networkMessenger.directMessageHandler in network/p2p/libp2p/netMessenger.go spawns a fresh goroutine for every incoming direct message before the antiflood layer makes an admission decision. There is no semaphore, throttler, or bound on concurrent in-flight spawns. A single connected libp...

7.5CVSS8.3AI score0.00488EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder