Executive brief
Denial of service via OOM in github.com/cometbft/cometbft
Affected products
- Go github.com/cometbft/cometbft
Junglewise Threat Intelligence
CVE-2023-34451: GO-2023-1883 - Denial of service via OOM in github.com/cometbft/cometbft
CVE-2023-34451 · Severity: low · CVSS 3.1 · Published 2023-07-13
Technologies: github.com/cometbft/cometbft (Go). Vendors: Go.
Related threats
- GO-2026-4361 - Inconsistencies between how commit signatures are verified and how block time is derived in github.com/cometbft/cometbft
- GO-2025-4025 - CometBFT's invalid BitArray handling can lead to network halt in github.com/cometbft/cometbft
- GO-2025-3443 - CometBFT allows a malicious peer to stall network by disseminating valid-looking block parts in github.com/cometbft/cometbft
- GO-2024-3259 - CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft
- CometBFT denial of service via invalid ValidatorIndex in Vote Extensions