Home
MEDIUM: 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDefault status
unaffected
Any version before 0.2.3
affected
Description
py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.
Problem types
CWE-770 Allocation of Resources Without Limits or Throttling
Product status
Any version before 0.2.3
References
github.com/libp2p/py-libp2p/issues/526
github.com/libp2p/py-libp2p/pull/531/files
github.com/libp2p/py-libp2p/compare/v0.2.2...v0.2.3