VDB
Sign up
HIGH

GHSA-hjqq-29pw-96wj

Nervos CKB node panics when processing a block which parent timestamp is too new

Details

### Impact

Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future.

### Patches

Please upgrade to v0.34.1

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/ckb
Introduced in: 0.33.0Fixed in: 0.33.2

Upgrade ckb to 0.33.2 or newer (ecosystem crates.io).

crates.io/ckb
Introduced in: 0.34.0Fixed in: 0.34.1

Upgrade ckb to 0.34.1 or newer (ecosystem crates.io).

References