CVE-2020-11090CWE-400

Uncontrolled Resource Consumption in Indy Node

High · published June 11, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. This is fixed in version 1.12.3.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02143 · 81.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2020-06-11T00:05Z
EPSS history
Timeline
  • 11 JUN 00:05Z
    Uncontrolled Resource Consumption in Indy Node
    cvelistv5