GHSA-pr39-8257-fxc2: Nervos CKB DoS: Process exists when p2p discovery protocol receives unsupported peer IP

February 2, 2024

The p2p discovery protocol assumes that the peer IP must be valid IPv4 address.

References

github.com/advisories/GHSA-pr39-8257-fxc2
github.com/nervosnetwork/ckb/commit/d909cdebacc4747e972de4a7e5f19c8f79480361
github.com/nervosnetwork/ckb/security/advisories/GHSA-pr39-8257-fxc2

Detect and mitigate GHSA-pr39-8257-fxc2 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →