CVE-2020-10937

An issue was discovered in IPFS (aka go-ipfs) 0.4.23

published November 2, 2020

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

An issue was discovered in IPFS (aka go-ipfs) 0.4.23. An attacker can generate ephemeral identities (Sybils) and leverage the IPFS connection management reputation system to poison other nodes' routing tables, eclipsing the nodes that are the target of the attack from the rest of the network. Later versions, in particular go-ipfs 0.7, mitigate this.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01161 · 66.9th percentile
Published
2020-11-02T16:53Z
EPSS history
Timeline
  • 02 NOV 16:53Z
    An issue was discovered in IPFS (aka go-ipfs) 0.4.23
    cvelistv5