GitHub Advisoryadvisory · crates.io
GHSA-hjqq-29pw-96wj Nervos CKB node panics when processing a block which parent timestamp is too new
HIGH
Official page ↗
- Ecosystem
- crates.io
- Packages
- ckb
- Severity
- High
- Reviewed
- 2024-02-02
Affected packages
• crates.io ckb: >= 0.33.0, < 0.33.2 → fixed in 0.33.2
• crates.io ckb: >= 0.34.0, < 0.34.1 → fixed in 0.34.1
Description
Impact
Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future.
Patches
Please upgrade to v0.34.1