Executive brief
Remote memory exhaustion in ckb
Affected products
- crates.io ckb
Junglewise Threat Intelligence
CVE-2021-45699: RUSTSEC-2021-0108 - Remote memory exhaustion in ckb
CVE-2021-45699 · Severity: low · CVSS 3.1 · Published 2021-07-25
Technologies: ckb (crates.io). Vendors: crates.io.
Related threats
- Nervos CKB Pool does not remove the conflicting transactions from the statistics
- Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
- Nervos CKB Snappy decompress length can be very large and causes out of memory error
- Nervos CKB Panic on malformed input
- Nervos CKB BlockTimeTooNew should not be considered as invalid block