{"id":"GHSA-wjxc-pjx9-4wvm","aliases":[],"url":"https://o3.security/vulnerability/GHSA-wjxc-pjx9-4wvm","summary":"Nervos CKB Panic on malformed input","details":"### Impact\nCKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages\n\n### References\nhttps://github.com/BurntSushi/rust-snappy/issues/29","published":"2024-02-03T00:18:06Z","modified":"2024-02-03T00:18:06Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"ckb","fixedVersion":"0.34.2"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/security/advisories/GHSA-wjxc-pjx9-4wvm"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-02-03T00:18:06Z"}}