GHSA-cw98-cx2m-9qqg

Suggest an improvement
Source
https://github.com/advisories/GHSA-cw98-cx2m-9qqg
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/01/GHSA-cw98-cx2m-9qqg/GHSA-cw98-cx2m-9qqg.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-cw98-cx2m-9qqg
Aliases
Published
2022-01-06T22:10:08Z
Modified
2023-11-08T04:07:22.687319Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Denial of Service in ckb
Details

An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blockchain node crash) via a dead call that is used as a DepGroup.

References

Affected packages

crates.io / ckb

Package

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.40.0