libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers
Thelibp2p-rendezvous server has no limit on how many namespaces a single peer can register. A malicious peer can repeatedly register unique namespaces in a loop, and the server accepts the requests, allocating memory for each registration without pushback. If an attacker continues submitting malicous requests for long enough, (or with multiple sybil peers) the server process crashes due to OOM. No auth is required; therefore, any peer on the network …