PT-2019-20066
تاريخ النشر
2019-08-23
·
تاريخ التحديث
2019-08-23
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
libp2p-secio versions prior to 0.9.0
Description
The issue is related to an identity spoofing problem where the
PeerId of DstPeer is not correctly verified against the PeerId discovered during the crypto handshake. This results in a high severity vulnerability.Recommendations
Update to version 0.9.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾