Nimiq core-rs-albatross DHT Query Poisoning Vulnerability Advisory

Vulnerability Summary for nimiq/core-rs-albatross Vulnerability Overview In version of , there is a vulnerability related to the DHT (Distributed Hash Table). Specifically: DHT Query Poisoning: An attacker may cause abnormal behavior or crashes in nodes by constructing malicious DHT query requests. Scope of Impact The vulnerability affects nodes using , particularly those involved in network communication and block synchronization. It may lead to issues such as node service interruption, data inconsistency, or resource exhaustion. Remediation Developers have fixed this vulnerability in version . The fix includes improvements to the DHT query logic to ensure nodes can safely handle query requests from other nodes. POC Code No specific POC code or exploit code was provided on the page. Additional Information This version also includes several other improvements and fixes, such as: - Removal of unsafe arithmetic logic using . - Validation of in the RPC handling of . - Limiting the DHT fallback HTTP response body size to 1 MB. - Fixing interlink block inclusion proofs. - Fixing issues with the rebranch logic in light chains. - Fixing panic on invalid signature lengths. - Fixing boundary checks for MerkleProof and MerklePath deserialization. - Fixing multi-chain error handling. - Fixing ChainInfo to reject blocks with overflow in transaction fee totals. - Fixing infinite polling loops in discovery handlers. - Fixing panic on empty addresses in . - Fixing DHT GetRecord queries hanging on untrusted peer responses. - Protecting from empty inputs. Contributors New contributors: @wille-io Full Changelog Full changelog link: v1.3.9...v1.4.0 Assets The page footer indicates there are 3 assets, but specific asset details are not provided.

Goal Reached Thanks to every supporter — we hit 100%!

Nimiq core-rs-albatross DHT Query Poisoning Vulnerability Advisory

More from this source