CVE-2021-45699

CVE-2021-45699 affects the Rust crate ckb (pre-0.40.0). The issue allows remote attackers to trigger an inability to allocate memory for the misbehavior HashMap, potentially enabling a 51% attack against the Nervos CKB blockchain. The root cause is memory management for the HashMap used to track ...

CVE-2021-45700

CVE-2021-45700 describes a DoS in the Rust-CKB crate (ckb) prior to version 0.40.0. The vulnerability allows an attacker to crash Nervos CKB blockchain nodes by triggering a dead call used as a DepGroup, leading to node instability or service disruption. Affected software: ckb crate before 0.40.0...

CVE-2021-45698

The CVE-2021-45698 issue affects the Rust crate ckb prior to 0.40.0. The get_block_template RPC may fail when it should select a higher-fee transaction, impacting block template construction. The vulnerability is described consistently across sources (NVD/Red Hat and related advisories) as a get_...