Lucene search
+L

27 matches found

OSV
OSV
added 2024/02/02 10:23 p.m.13 views

GHSA-R9RV-9MH8-PXF4 Nervos CKB BlockTimeTooNew should not be considered as invalid block

Impact Currently, when a node receives a block in future according to its local wall clock, it will mark the block as invalid and ban the peer. If the header's timestamp is more than 15 seconds ahead of our current time. In that case, the header may become valid in the future, and we don't want t...

6.9AI score
Exploits0References2
Github Security Blog
Github Security Blog
added 2024/02/02 10:23 p.m.17 views

Nervos CKB BlockTimeTooNew should not be considered as invalid block

Impact Currently, when a node receives a block in future according to its local wall clock, it will mark the block as invalid and ban the peer. If the header's timestamp is more than 15 seconds ahead of our current time. In that case, the header may become valid in the future, and we don't want t...

6.9AI score
Exploits0References3Affected Software1
Veracode
Veracode
added 2023/01/11 8:49 a.m.18 views

Denial Of Service (DoS)

github.com/ipld/go-codec-dagpb is vulnerable to denial of service. The vulnerability exists when dag-pb codec decodes an invalid block which allows an attacker to cause an application crash...

7.5CVSS7AI score0.00723EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.16 views

PT-2023-9426 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the nilfs2 component of the Linux kernel. It occurs when nilfs2 reads a corrupted disk image and attempts to read a b-tree node block using an invalid...

8.4CVSS6.8AI score0.019EPSS
Exploits13References1637
OSV
OSV
added 2022/12/27 9:13 p.m.22 views

CVE-2022-2584 Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb

The dag-pb codec can panic when decoding invalid blocks...

7.5CVSS7.1AI score0.00723EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.51 views

go-dagpb 缓冲区错误漏洞

go-dagpb is an IPLD open source implementation of the DAG-PB Go specification. A security vulnerability exists in go-dagpb that stems from the fact that the dag-pb codec may crash when decoding an invalid block...

7.5CVSS7.2AI score0.00723EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2021/06/23 2:18 p.m.2 views

QEMU: ide: atapi: OOB access while processing read commands

An out-of-bounds read-access flaw was found in the ATAPI Emulator of QEMU. This issue occurs while processing the ATAPI read command if the logical block addressLBA is set to an invalid value. A guest user may use this flaw to crash the QEMU process on the host resulting in a denial of service...

3.9CVSS7.1AI score0.00369EPSS
Exploits0References5
Rows per page
Query Builder