Read the docs

tendermint

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

tendermint records in CISA KEV

No tendermint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tendermint 4 records HIGH

Records

4 records

TI-2019-15212 CVE-2019-25072 · GHSA-3fm3-m23v-5r46

Uncontrolled resource consumption in github.com/tendermint/tendermint

Priority HIGH 66

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0123 Published 2022-12-27 Fixed in 0.31.1 CWE-400
TI-2021-04371 CVE-2021-21271 · GHSA-p658-8693-mhvg

Denial of service in TenderMint Core

Priority LOW 32

Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01763 Published 2021-01-26 Fixed in 0.34.3 CWE-400
TI-2020-11866 CVE-2020-15091 · GHSA-6jqj-f58p-mrw3

Denial of Service in TenderMint

Priority LOW 31

TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00905 Published 2020-07-02 Fixed in 0.33.6 CWE-347
TI-2020-04359 CVE-2020-5303 · GHSA-v24h-pjjv-mcp6

Denial of service in Tendermint

Priority LOW 20

Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01369 Published 2020-04-10 Fixed in 0.32.10, 0.33.3 +1 CWE-789
Open these records in search →