GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though it continuously misbehaves by never forwarding topic messages.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NProtocol Gossipsub
APPProtocol1.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2020-12821CRITICAL9.8PL ✓ten sam produkt
Gossipsub 1.0 — brak odporności na spam i ataki eclipse/sybil
CVE-2026-35405HIGH7.5ten sam vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, libp...
CVE-2026-35457HIGH8.2ten sam vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, the ...
CVE-2026-34219HIGH8.2ten sam vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49...
CVE-2026-33040HIGH8.7ten sam vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to ...