Libp2p

Libp2p-rendezvous: Integer Overflow or Wraparound

Libp2p-deflate: security vulnerability

@libp2p Floodsub: Missing Release of Memory after Effective Lifetime

libp2p nodes vulnerable to attack using large RSA keys

also in 2 other products

libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners

Libp2p Js-libp2p: Missing Release of Resource after Effective Lifetime

libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays

libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow

also in 1 other product

libp2p-rust: Gossipsub GRAFT topics unbounded growth

libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow

also in 1 other product

py-libp2p: yamux connection DoS via oversized data frame

go-libp2p denial of service vulnerability from lack of resource management

also in 2 other products

Yamux remote Panic via malformed WindowUpdate credit

also in 1 other product

Yamux remote Panic via malformed Data frame with SYN set and len = 262145

also in 1 other product

libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

Libp2p Js-libp2p: Authentication Bypass by Spoofing

libp2p nodes vulnerable to OOM attack

also in 2 other products

Yamux Memory Exhaustion Vulnerability via Active::pending_frames property

libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes

libp2p denial of service vulnerability from lack of resource management

also in 1 other product

libp2p-rust denial of service vulnerability from lack of resource management

also in 1 other product

libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers

also in 1 other product

libp2p: security vulnerability

libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion

also in 1 other product