Denial Of Service (DoS)

2020-06-1200:33:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

54.3%

JSON

indy_plenum is vulnerable to denial of service (DoS). The vulnerability exists due to the lack of consensus while validating write transaction, causing unbounded retries upon failure.

CPENameOperatorVersion
indy-plenumle1.12.2

CPE	Name	Operator	Version
	indy-plenum	le	1.12.2

References

github.com/hyperledger/indy-node/blob/master/CHANGELOG.md#1123

github.com/hyperledger/indy-node/security/advisories/GHSA-3gw4-m5w7-v89c

github.com/hyperledger/indy-plenum/commit/d20859a3d5c8b6f50a6c7b1f15b84e43b4671e40

pypi.org/project/indy-node/1.12.3/

0.002 Low

EPSS

Percentile

54.3%

JSON

Related for VERACODE:25664