{"id":"GHSA-hjqq-29pw-96wj","summary":"Nervos CKB node panics when processing a block which parent timestamp is too new","details":"### Impact\n\nAdversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. \n\n### Patches\n\nPlease upgrade to v0.34.1","modified":"2024-02-02T22:23:11Z","published":"2024-02-02T22:23:11Z","database_specific":{"nvd_published_at":null,"cwe_ids":[],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2024-02-02T22:23:11Z"},"references":[{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/security/advisories/GHSA-hjqq-29pw-96wj"},{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/commit/ae3c791068f2f76c67cd5483501f09de3fd8cc0b"},{"type":"WEB","url":"https://github.com/nervosnetwork/ckb/commit/c6725bb0659b6639f384d699f815117d76107388"}],"affected":[{"package":{"name":"ckb","ecosystem":"crates.io","purl":"pkg:cargo/ckb"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.33.0"},{"fixed":"0.33.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-hjqq-29pw-96wj/GHSA-hjqq-29pw-96wj.json"}},{"package":{"name":"ckb","ecosystem":"crates.io","purl":"pkg:cargo/ckb"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.34.0"},{"fixed":"0.34.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-hjqq-29pw-96wj/GHSA-hjqq-29pw-96wj.json"}}],"schema_version":"1.9.0"}