GO-2023-1883

    Dashboard / Vulnerabilities / GO-2023-1883

    GO-2023-1883

    Published: 13 Jul 2023Last Modified: 20 May 2024

    Summary: Denial of service via OOM in github.com/cometbft/cometbft

    Details: A bug in the CometBFT middleware causes the mempool's two data structures to fall out of sync. This can lead to duplicate transactions that cannot be removed, even after they are committed in a block. The only way to remove the transaction is to restart the node. This can be exploited by an attacker to bring down a node by repeatedly submitting duplicate transactions.

    References: https://github.com/cometbft/cometbft/security/advisories/GHSA-w24w-wp77-qffm, https://github.com/cometbft/cometbft/pull/890, https://github.com/tendermint/tendermint/pull/2778

    Affected packages

    Package

    Name: github.com/cometbft/cometbft

    Purl: pkg:golang/github.com/cometbft/cometbft

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -0.37.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GO-2023-1883 | CVE-DB