GHSA-84x2-2qv6-qg56: Nervos CKB P2P DoS Attacks
The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted txhashes, it will mark it in memory to avoid duplicated requests. code → . It is easy to establish a DoS attach by generating random tx hashes. Impact It affects all nodes connected to the P2P network. Workarounds Apply rate limit on the data sent to CKB P2P port.
Published Feb 2, 2024
Affected packages
ckb
- Ecosystem
- Rust (crates.io)
- Affected
- < 0.34.0
- Fixed in
- 0.34.0
- Check
cargo tree -i ckb
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted tx_hashes, it will mark it in memory to avoid duplicated requests. code → .
It is easy to establish a DoS attach by generating random tx hashes.
Impact
It affects all nodes connected to the P2P network.
Workarounds
Apply rate limit on the data sent to CKB P2P port.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology