GitHub Advisoryadvisory · crates.io

GHSA-h4c3-5275-vrmg Nervos CKB Pool does not remove the conflicting transactions from the statistics

MEDIUM Published 2024-02-03 Modified 2024-02-03 Official page ↗

Ecosystem: crates.io
Packages: ckb
Severity: Moderate
Reviewed: 2024-02-03

Affected packages

• crates.io ckb: < 0.39.2 → fixed in 0.39.2

Description

Impact There's a bug in the pool statistics that when conflicting transactions are removed from the pool, they are not subtracted from the statics. Finally, the transaction pool keeps full and reject all transactions. Patches 0.39.2 Workarounds Restart the CKB node.

References

https://github.com/nervosnetwork/ckb/security/advisories/GHSA-h4c3-5275-vrmg web