2 matches found
Monero: ZMQ get_output_distribution duplicate amount DoS
The ZMQ getoutputdistribution RPC was vulnerable to a memory exhaustion denial-of-service attack. The method accepted an unbounded amounts array and returned a separate distribution for each entry, allowing a small request to expand into a very large response by repeatedly including the amount 0...
5.9AI score
SaveExploits0
WS-2022-0459
A Denial-of-Service DoS vulnerability was found in monero. Passing a large list of amounts to the getoutputdistribution call crashes a remote node, after maybe 90 seconds of keeping it busy. The issue is fixed in 0.17.3.0...
8.7CVSS6AI score
SaveExploits0References1
20