Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: tendermint Clear all filters
TI-2019-15212 CVE-2019-25072 · GHSA-3fm3-m23v-5r46

Uncontrolled resource consumption in github.com/tendermint/tendermint

Priority HIGH 66

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0123 Published 2022-12-27 Fixed in 0.31.1 CWE-400
TI-2021-04371 CVE-2021-21271 · GHSA-p658-8693-mhvg

Denial of service in TenderMint Core

Priority LOW 32

Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01763 Published 2021-01-26 Fixed in 0.34.3 CWE-400
TI-2020-11866 CVE-2020-15091 · GHSA-6jqj-f58p-mrw3

Denial of Service in TenderMint

Priority LOW 31

TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00905 Published 2020-07-02 Fixed in 0.33.6 CWE-347
TI-2020-04359 CVE-2020-5303 · GHSA-v24h-pjjv-mcp6

Denial of service in Tendermint

Priority LOW 20

Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01369 Published 2020-04-10 Fixed in 0.32.10, 0.33.3 +1 CWE-789