PT-2020-13275

CVE-2020-12821

·

Published

2020-07-07

·

Updated

2020-07-15

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Gossipsub version 1.0
Description The issue concerns Gossipsub 1.0's inability to properly resist invalid message spam. This includes susceptibility to an eclipse attack or a sybil attack.
Recommendations For Gossipsub version 1.0, consider implementing additional measures to resist invalid message spam, such as enhancing spam detection mechanisms or limiting the impact of sybil and eclipse attacks, until a more robust solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾