CVE-2023-30769

Published Apr 17, 2023

Last updated 2 years ago

Overview

Description: Vulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes.
Source: disclosures@halborn.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
disclosures@halborn.com: CWE-400

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dogecoin:dogecoin:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E272CF7A-BDB4-47F9-A309-3054E004F2BF",
            "versionEndExcluding": "1.14.6"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References