CVE-2021-45700

Опубликовано: 27 дек. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blockchain node crash) via a dead call that is used as a DepGroup.

Ссылки

https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0109.md
Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2021-0109.html
Third Party Advisory
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0109.md
Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2021-0109.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nervos:ckb:*:*:*:*:*:rust:*:*

Версия до 0.40.0 (исключая)

EPSS

Процентиль: 53%

0.00296

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-cw98-cx2m-9qqg