CVE-2022-23486 libp2p-rust denial of service vulnerability from lack of resource management

libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.45.1 an attacker node can cause a victim node to allocate a large number of small memory chunks, which can ultimately lead to the victim’s process running out of memory and thus getting...

PT-2022-16020 · Unknown · Libp2P-Rust

Name of the Vulnerable Software and Affected Versions: libp2p-rust versions prior to 0.45.1 Description: The issue allows an attacker node to cause a victim node to allocate a large number of small memory chunks, leading to the victim's process running out of memory and potentially getting killed...