GHSA-pr39-8257-fxc2: Nervos CKB DoS: Process exists when p2p discovery protocol receives unsupported peer IP

February 2, 2024

The p2p discovery protocol assumes that the peer IP must be valid IPv4 address.

References

github.com/advisories/GHSA-pr39-8257-fxc2
github.com/nervosnetwork/ckb/commit/d909cdebacc4747e972de4a7e5f19c8f79480361
github.com/nervosnetwork/ckb/security/advisories/GHSA-pr39-8257-fxc2

Code Behaviors & Features

Detect and mitigate GHSA-pr39-8257-fxc2 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →