github.com
https://github.com/nervosnetwork/ckb CVE-2021-45698
CRITICAL
RPC call failure in ckb
Record summary
CVE-2021-45698 has a selected CVSS score of 9.8 (critical).
Description
An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
| GitHub Advisory | Before 0.40.0 · Fixed in 0.40.0 | affected |
References
5github.com
https://github.com/nervosnetwork/ckb/security/advisories/GHSA-v666-6w97-pcwm nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-45698 raw.githubusercontent.com
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0107.md rustsec.org
https://rustsec.org/advisories/RUSTSEC-2021-0107.html