Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/18 7:54 p.m.13 views

Gossipsub PRUNE.backoff Duration Overflow

Summary The Rust libp2p Gossipsub implementation accepts attacker-controlled PRUNE backoff values and may perform unchecked time arithmetic when storing backoff state. A specially crafted PRUNE control message with an extremely large backoff e.g. u64::MAX can lead to Duration/Instant overflow...

8.7CVSS5.8AI score0.00567EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder