OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-23 15:38:27 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
377fdd8e5940ee32984803400d50dffdc3b2cea8
advisory-db/crates/ckb/RUSTSEC-2021-0109.md
github-actions[bot] 8b677b0f9a Assigned RUSTSEC-2021-0109 to ckb (#1035) 
Co-authored-by: Shnatsel <Shnatsel@users.noreply.github.com>
2021-09-10 15:58:38 +00:00

453 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2021-0109"
package = "ckb"
date = "2021-07-25"
url = "https://github.com/nervosnetwork/ckb/security/advisories/GHSA-45p7-c959-rgcm"
aliases = ["GHSA-45p7-c959-rgcm"]
[versions]
patched = [">= 0.40.0"]

Process crashes when the cell used as DepGroup is not alive

It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.