Nervos
Products
2- 3 CVEs
- 1 CVE
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-45698 | Cri | 0.64 | 9.8 | 0.01 | Dec 27, 2021 | An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction. | ||
| CVE-2021-45700 | Hig | 0.49 | 7.5 | 0.01 | Dec 27, 2021 | An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blockchain node crash) via a dead call that is used as a DepGroup. | ||
| CVE-2021-45699 | Hig | 0.49 | 7.5 | 0.01 | Dec 27, 2021 | An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap. | ||
| CVE-2021-45697 | Cri | 0.00 | 9.8 | 0.01 | Dec 27, 2021 | An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result. |
- risk 0.64cvss 9.8epss 0.01
An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction.
- risk 0.49cvss 7.5epss 0.01
An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blockchain node crash) via a dead call that is used as a DepGroup.
- risk 0.49cvss 7.5epss 0.01
An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap.
- risk 0.00cvss 9.8epss 0.01
An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result.