github.com
https://github.com/nervosnetwork/ckb CVE-2021-45699
HIGH
Allocation of Resources Without Limits or Throttling in ckb
Record summary
CVE-2021-45699 has a selected CVSS score of 7.5 (high).
Description
An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
| GitHub Advisory | Before 0.40.0 · Fixed in 0.40.0 | affected |
References
5github.com
https://github.com/nervosnetwork/ckb/security/advisories/GHSA-48vq-8jqv-gm6f nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-45699 raw.githubusercontent.com
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0108.md rustsec.org
https://rustsec.org/advisories/RUSTSEC-2021-0108.html