CVE-2020-11090

HIGH

Indy Node 1.12.2 - Uncontrolled Resource Consumption via Malformed TAA Transaction

Title source: llm
STIX 2.1

Description

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. This is fixed in version 1.12.3.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_misc
https://pypi.org/project/indy-node/1.12.3/

Scores

CVSS v3 7.5
EPSS 0.0041
EPSS Percentile 61.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (2)
linuxfoundation/indy-node 1.12.2
pypi/indy-node 1.12.2 - 1.12.3PyPI
Published Jun 11, 2020
Tracked Since Feb 18, 2026