- Reported
-
- Issued
-
- Package
-
libp2p-rendezvous
(crates.io)
- Type
-
Vulnerability
- Categories
-
- Keywords
-
#libp2p
#rendezvous
#memory-exhaustion
- Aliases
-
- References
-
- CVSS Score
- 8.2
HIGH
- CVSS Details
-
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality Impact
- None
- Integrity Impact
- Low
- Availability Impact
- High
- CVSS Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- Patched
-
Description
Each DISCOVER request to a rendezvous server creates a pagination cookie, which the server kept in a map together with the registrations already returned for it. Entries were never evicted or capped, so an unauthenticated peer sending ordinary DISCOVER requests can make the server's memory grow without bound.
The fix keeps cookies in a fixed-size LRU cache (10,000 entries by default, configurable through Config). It is in 0.17.1.
Advisory available under CC0-1.0
license.