GitHub Advisoryadvisory · crates.io

GHSA-2969-8hh9-57jc Allocation of Resources Without Limits or Throttling in ckb

HIGH Published 2022-01-06 Modified 2022-01-07 Official page ↗
Aliases
CVE-2021-45699
Ecosystem
crates.io
Packages
ckb
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Reviewed
2022-01-05

Affected packages

• crates.io ckb: < 0.40.0 → fixed in 0.40.0

Description

An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap.

Related

Alias · CVE (1)

  • CVE-2021-45699 An issue was discovered in the ckb crate before 0.40.0 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References