{"id":"GHSA-hjqq-29pw-96wj","aliases":[],"url":"https://o3.security/vulnerability/GHSA-hjqq-29pw-96wj","summary":"Nervos CKB node panics when processing a block which parent timestamp is too new","details":"### Impact\n\nAdversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. \n\n### Patches\n\nPlease upgrade to v0.34.1","published":"2024-02-02T22:23:11Z","modified":"2024-02-02T22:23:11Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"ckb","fixedVersion":"0.33.2"},{"ecosystem":"crates.io","name":"ckb","fixedVersion":"0.34.1"}],"fix":{"url":"https://github.com/nervosnetwork/ckb/commit/ae3c791068f2f76c67cd5483501f09de3fd8cc0b","label":"nervosnetwork/ckb@ae3c791"},"references":[{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/security/advisories/GHSA-hjqq-29pw-96wj"},{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/commit/ae3c791068f2f76c67cd5483501f09de3fd8cc0b"},{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/commit/c6725bb0659b6639f384d699f815117d76107388"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-02-02T22:23:11Z"}}