CVE-2020-5303

CVE-2020-5303 affects Tendermint prior to 0.33.3, 0.32.10 and 0.31.12. The issues include a denial-of-service risk from unconstrained P2P connection attempts that allocates memory per connection, potentially causing temporary spikes and OOM, and a memory leak where activeIDs are not reclaimed aft...

PT-2020-18392

Name of the Vulnerable Software and Affected Versions Tendermint versions prior to 0.33.3 Tendermint versions prior to 0.32.10 Tendermint versions prior to 0.31.12 Description Tendermint has a denial-of-service vulnerability due to not limiting the number of P2P connection requests, which can lea...