6 matches found
CVE-2022-23486
libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.45.1 an attacker node can cause a victim node to allocate a large number of small memory chunks, which can ultimately lead to the victim’s process running out of memory and thus getting...
artillery-core (>=0.1.2-alpha.3, <=0.1.2), bastion (>=0.3.5, <=0.4.5) +71 more potentially affected by CVE-2022-23486 via libp2p (>=0.18.1, <=0.42.2)
libp2p CARGO version =0.18.1, =0.1.2-alpha.3, =0.3.5, =0.1.0, =0.7.0, =0.1.5, =2.0.0-alpha.3, =0.4.0, =0.2.0, =0.20.0, =0.8.0, =0.8.0, =0.10.0 and more Source cves: CVE-2022-23486 Source advisory: OSV:GHSA-JVGW-GCCV-Q5P8...
CVE-2022-23486
CVE-2022-23486 affects the Rust implementation of libp2p (libp2p-rust) in versions before 0.45.1. An attacker node can induce a victim to allocate a large number of small memory chunks, exhausting the victim process memory and potentially causing OOM/killing, enabling a denial-of-service, especia...
CVE-2022-23486 libp2p-rust denial of service vulnerability from lack of resource management
libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.45.1 an attacker node can cause a victim node to allocate a large number of small memory chunks, which can ultimately lead to the victim’s process running out of memory and thus getting...
CVE-2022-23486 libp2p-rust denial of service vulnerability from lack of resource management
libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.45.1 an attacker node can cause a victim node to allocate a large number of small memory chunks, which can ultimately lead to the victim’s process running out of memory and thus getting...
artillery-core (>=0.1.2-alpha.3, <=0.1.2), bastion (>=0.3.5, <=0.4.5) +71 more potentially affected by CVE-2022-23486 via libp2p (>=0.18.1, <=0.42.2)
libp2p CARGO version =0.18.1, =0.1.2-alpha.3, =0.3.5, =0.1.0, =0.7.0, =0.1.5, =2.0.0-alpha.3, =0.4.0, =0.2.0, =0.20.0, =0.8.0, =0.8.0, =0.10.0 and more Source cves: CVE-2022-23486 Source advisory: OSV:RUSTSEC-2022-0084...