Lucene search
Veracode Vulnerability DatabaseVERACODE:39259HistoryFeb 14, 2023 - 9:14 a.m.
Denial Of Service (DoS)
2023-02-1409:14:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
ipfs
unixfsnode
denial of service
0.001 Low
EPSS
Percentile
45.7%
github.com/ipfs/go-unixfsnode is vulnerable to Denial of Service (DoS) attacks. A malicious user is able to read malformed HAMT sharded directories which causes virtual memory leaks, resulting in Denial of Service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/ipfs/go-unixfsnode | le | v1.5.1 | |
| github.com/ipfs/go-unixfsnode | le | v1.5.1 |
References
github.com/ipfs/go-unixfsnode/commit/59050ea8bc458ae55246ae09243e6e165923e076
github.com/ipfs/go-unixfsnode/commit/91b3d39d33ef0cd2aff2c95d50b2329350944b68
github.com/ipfs/go-unixfsnode/commit/a4ed723727e0bdc2277158337c2fc0d82802d122
github.com/ipfs/go-unixfsnode/security/advisories/GHSA-4gj3-6r43-3wfc
Related
github
github
IPFS go-unixfsnode subject to DOS via HAMT Decoding Panics
2023-02-10 19:54:14
prion
prion
Design/Logic Flaw
2023-02-09 21:15:00
cvelist
cvelist
CVE-2023-23631 HAMT Decoding Panics in github.com/ipfs/go-unixfsnode
2023-02-09 20:46:22
cve
cve
CVE-2023-23631
2023-02-09 21:15:11
osv
osv
IPFS go-unixfsnode subject to DOS via HAMT Decoding Panics
2023-02-10 19:54:14
CVE-2023-23631
2023-02-09 21:15:11
Denial of service via HAMT decoding panic in github.com/ipfs/go-unixfsnode
2023-02-14 19:41:30
nvd
nvd
CVE-2023-23631
2023-02-09 21:15:11