Lucene search
+L

2 matches found

Hacker One
Hacker One
•added 2026/04/18 10:54 a.m.•19 views

Monero: ZMQ get_output_distribution duplicate amount DoS

The ZMQ getoutputdistribution RPC was vulnerable to a memory exhaustion denial-of-service attack. The method accepted an unbounded amounts array and returned a separate distribution for each entry, allowing a small request to expand into a very large response by repeatedly including the amount 0...

5.9AI score
SaveExploits0
Mend
Mend
•added 2022/08/20 12:00 a.m.•4 views

WS-2022-0459

A Denial-of-Service DoS vulnerability was found in monero. Passing a large list of amounts to the getoutputdistribution call crashes a remote node, after maybe 90 seconds of keeping it busy. The issue is fixed in 0.17.3.0...

8.7CVSS6AI score
SaveExploits0References1
Rows per page
Query Builder