GitHub Advisoryadvisory · Go

GHSA-vc3x-gx6c-g99f Denial of Service in Bytom

HIGH Published 2022-02-15 Modified 2023-02-07 Official page ↗

Aliases: CVE-2018-18206
Ecosystem: Go
Packages: github.com/bytom/bytom
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-190
Reviewed: 2021-05-20

Affected packages

• Go github.com/bytom/bytom: < 1.0.6 → fixed in 1.0.6

Description

In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash.

Related

Alias · CVE (1)

CVE-2018-18206 In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash. vulnerability

Weakness · CWE (1)

CWE-190 Integer Overflow or Wraparound weakness

References