VDB
Sign up
HIGH

GHSA-wjxc-pjx9-4wvm

Nervos CKB Panic on malformed input

Details

### Impact CKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages

### References https://github.com/BurntSushi/rust-snappy/issues/29

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/ckb
Introduced in: 0Fixed in: 0.34.2

Upgrade ckb to 0.34.2 or newer (ecosystem crates.io).

References