Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2025/07/14 6:30 a.m.4 views

py-libp2p is vulnerable to DoS attacks through use of large RSA keys

py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...

4.3CVSS6.3AI score0.00281EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/07/14 6:30 a.m.0 views

GHSA-X8C6-GJ59-6RX8 py-libp2p is vulnerable to DoS attacks through use of large RSA keys

py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...

4.3CVSS5.9AI score0.00281EPSS
Exploits0References6
NVD
NVD
added 2025/07/14 5:15 a.m.3 views

CVE-2025-29606

py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...

4.3CVSS0.00281EPSS
Exploits0References3
OSV
OSV
added 2025/07/14 5:15 a.m.2 views

CVE-2025-29606

py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...

4.3CVSS6.1AI score
Exploits0References3
Cvelist
Cvelist
added 2025/07/14 12:0 a.m.5 views

CVE-2025-29606

py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...

4.3CVSS0.00281EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/07/14 12:0 a.m.2 views

CVE-2025-29606

py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...

4.3CVSS7AI score0.00281EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/07/14 12:0 a.m.1 views

PT-2025-29420 · Pypi · Py-Libp2P

Name of the Vulnerable Software and Affected Versions: py-libp2p versions prior to 0.2.3 Description: py-libp2p versions prior to 0.2.3 are susceptible to a denial of service resource consumption issue. This occurs when a peer sends a large RSA key. Recommendations: Update py-libp2p to version...

4.3CVSS6.3AI score0.00281EPSS
Exploits0References11
CVE
CVE
added 2025/07/14 12:0 a.m.15 views

CVE-2025-29606

The CVE-2025-29606 entry impacts the Python libp2p project (py-libp2p) prior to 0.2.3, where a peer can trigger a DoS by sending a very large RSA key. Root cause: insufficient validation of RSA key sizes, leading to resource exhaustion on the target. Affected component/file is the RSA key handlin...

4.3CVSS7AI score0.00281EPSS
Exploits0References3
Rows per page
Query Builder