Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Yamux remote Panic via malformed WindowUpdate credit
Vulnerability Description
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting, which triggers a panic in the connection state machine. This is remotely reachable over a normal network connection and does not require authentication. This vulnerability is fixed in 0.13.9.
CVSS Information
N/A
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
Yamux 输入验证错误漏洞
Vulnerability Description
Yamux是美国libp2p开源的一个多路复用器。 Yamux 0.13.0至0.13.9之前版本存在输入验证错误漏洞，该漏洞源于特制的WindowUpdate可导致发送窗口计数算术溢出，可能触发连接状态机崩溃。
CVSS Information
N/A
Vulnerability Type
N/A