Lucene search
+L

3 matches found

OSV
OSV
added 2023/02/14 7:41 p.m.55 views

GO-2023-1559 Denial of service via HAMT decoding panic in github.com/ipfs/go-unixfsnode

Trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by a bogus fanout parameter in the HAMT directory nodes. There are no known workarounds users are advised to...

7.5CVSS6.2AI score0.00908EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2023/02/10 11:8 p.m.21 views

Denial of service via HAMT Decoding Panics

Impact Trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by bogus fanout parameter in the HAMT directory nodes. This include checks returned in ipfs/go-bitfield...

7.5CVSS7.2AI score0.00675EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2023/02/10 7:54 p.m.31 views

IPFS go-unixfsnode subject to DOS via HAMT Decoding Panics

Impact Trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by a bogus fanout parameter in the HAMT directory nodes. This includes checks returned in...

7.5CVSS7.2AI score0.00908EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder