1 matches found
Remote DoS through unchecked `IdList` allocation in negentropy
Summary The negentropy crate is vulnerable to denial-of-service through an unchecked, peer-controlled ID count in reconciliation messages. With the std feature enabled, which is the default configuration, a small malformed message can trigger an enormous memory allocation and terminate the...
6AI score
SaveExploits0Affected Software1
20