Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/06/05 4:42 p.m.•40 views

Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt

Summary Every transaction gossiped on the klever-go P2P network is decoded and validated synchronously inside the libp2p pubsub topic-validator callback. The validator txVersionChecker.CheckTxVersion dereferences tx.RawData.Version with no nil check. A protobuf Transaction whose embedded RawData...

7.5CVSS8.1AI score0.00488EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/05 12:00 a.m.•166 views

PT-2026-48345

Name of the Vulnerable Software and Affected Versions Klever-Go versions 1.7.14 through 1.7.17 Description A nil-pointer panic can be triggered by a protobuf Transaction where the embedded RawData sub-message is omitted, causing RawData to decode to nil. During the decoding and validation of...

7.5CVSS8.3AI score0.00488EPSS
SaveExploits0
Rows per page
Query Builder