Protocol

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

Protocol records in CISA KEV

No Protocol vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Libp2p 6 records HIGH Go-ipfs 2 records MEDIUM Go-ipld-prime 2 records MEDIUM Gossipsub 2 records MEDIUM Libp2p-gossipsub 2 records MEDIUM Yamux 2 records MEDIUM Boxo 1 record MEDIUM Go-bitfield 1 record HIGH

Records

2 records in Gossipsub · all components

TI-2020-10190 CVE-2020-12821 · GHSA-3fxj-w9rj-xjw3

Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.

MEDIUM 46

Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01937 Published 2020-07-07 No fix listed

TI-2022-23607 CVE-2022-47547 · GHSA-77r2-q4c3-v635

GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and…

LOW 31

GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though it continuously misbehaves by never forwarding topic messages.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00555 Published 2022-12-19 No fix listed CWE-281

Open these records in search →

Critical	1
High	21
Medium	2
Low	0
No CVSS	0