CVE-2022-23486

CVE-2022-23486 affects the Rust implementation of libp2p (libp2p-rust) in versions before 0.45.1. An attacker node can induce a victim to allocate a large number of small memory chunks, exhausting the victim process memory and potentially causing OOM/killing, enabling a denial-of-service, especia...

CVE-2022-23492

CVE-2022-23492 concerns go-libp2p (Go implementation). Versions ≤ 0.18.0 are vulnerable to targeted resource exhaustion via memory-heavy operations, impacting connections, streams, peers, and memory management and potentially killing the host process. Multiple sources (NVD, Red Hat, OSV, CVE list...

CVE-2022-23487

This CVE affects js-libp2p: versions older than v0.38.0 are vulnerable to targeted resource exhaustion attacks that stress memory management (allocation of large memory, risking host OS termination). The issue is described across multiple sources (e.g., Red Hat RH-CVE, NVD/NVD lists, OSV) as a de...