PT-2020-13275
CVE-2020-12821
·
تاريخ النشر
2020-07-07
·
تاريخ التحديث
2020-07-15
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Gossipsub version 1.0
Description
The issue concerns Gossipsub 1.0's inability to properly resist invalid message spam. This includes susceptibility to an eclipse attack or a sybil attack.
Recommendations
For Gossipsub version 1.0, consider implementing additional measures to resist invalid message spam, such as enhancing spam detection mechanisms or limiting the impact of sybil and eclipse attacks, until a more robust solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾