CVE-2021-35041

    Dashboard / Vulnerabilities / CVE-2021-35041

    CVE-2021-35041

    Published: 24 Jun 2021Last Modified: 9 Jul 2026

    Summary:

    Details: The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format and cannot be decoded by the node correctly. As a result, the node may consume the memory sustainably and crash. More details are shown at: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/1951

    References: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/1951

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 4c8a5bbe44c19db8a002017ff9dbb16d3d28e9da
    Fixed -None

    Affected versions

    2.7.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-35041 | CVE-DB