CVE-2023-26248

The Kademlia DHT (specifically go-libp2p-kad-dht version 0.20.0 and earlier) used in IPFS (version 0.18.1 and earlier) contains a vulnerability in how it assigns routing information. The system assigns content information to peers with a small DHT distance from the content ID. An attacker can exp...

Torrent Swarm Poisoning

=== Credits === Written by Burningmace. Thanks to Blindkilla for helping me out. === Introduction === The BitTorrent protocol identifies peers using a tracker. Each peer announces itself to the tracker via HTTP. Certain parameters in the announce request itself can be altered in order to fake the...