VDB
Sign up
CRITICAL

GHSA-84x2-2qv6-qg56

Nervos CKB P2P DoS Attacks

Details

The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted `tx_hashes`, it will mark it in memory to avoid duplicated requests. [code → ](https://github.com/nervosnetwork/ckb/blob/26e4837212c392c3c706a0da7a056131fb060433/sync/src/relayer/transactions_process.rs#L67).

It is easy to establish a DoS attach by generating random tx hashes.

### Impact

It affects all nodes connected to the P2P network.

### Workarounds

Apply rate limit on the data sent to CKB P2P port.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/ckb
Introduced in: 0Fixed in: 0.34.0

Upgrade ckb to 0.34.0 or newer (ecosystem crates.io).

References