Improper Validation of Syntactic Correctness of Input

Overview @libp2p/kad-dht is a JavaScript implementation of the Kad-DHT for libp2p Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the verifyRecord function that leads to the unlimited message processing since rate limits are applied onl...

nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

Impact A malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record containing a TaggedSigned with a signature field whose byte length is not exactly 64. When the victim node's DHT verifier calls TaggedSigned::verify, execution reaches...

Sybil Attacks

github.com/libp2p/go-libp2p-kad-dht is vulnerable to Sybil attacks. The vulnerability is due to the method of assigning routing information based on the DHT distance between peer IDs and content IDs, allows attackers to generate many Sybil peers with small DHT distances, enabling them to disrupt ...

CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

@actiflixr/webtorrent (=1.0.0), @andrewosh/torrent-docker (>=1.6.0 <=1.6.1) +249 more potentially affected by CVE-2016-10519 via bittorrent-dht (>=0.5.0 <=4.0.4)

bittorrent-dht NPM version =0.5.0, =1.6.0, =0.1.0-beta.0, =0.1.1, =0.1.0, =0.1.1, =1.0.0, =0.0.1, =1.0.0-alpha.18, =1.0.0-alpha.18, =0.0.1, =1.2.18, =1.0.17, =1.0.0, =1.0.1 and more Source cves: CVE-2016-10519 Source advisory: OSV:GHSA-77G4-36JP-5V3M...

Opera 9.10 - .jpg Image DHT Marker Heap Corruption

Opera 9.10 - .jpg Image DHT Marker Heap Corruption Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release...