Nervos CKB node panics when processing a block which parent timestamp is too new · GHSA-hjqq-29pw-96wj · GitHub Advisory Database · GitHub

Nervos CKB node panics when processing a block which parent timestamp is too new

High severity GitHub Reviewed Published Jul 22, 2020 in nervosnetwork/ckb • Updated Feb 2, 2024

Package

ckb (Rust)

Affected versions

>= 0.33.0, < 0.33.2

>= 0.34.0, < 0.34.1

Patched versions

0.33.2

0.34.1

Description

Impact

Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future.

Patches

Please upgrade to v0.34.1

References

doitian published to nervosnetwork/ckb

Jul 22, 2020

Published to the GitHub Advisory Database Feb 2, 2024

Reviewed Feb 2, 2024

Last updated Feb 2, 2024