VulnerabilityModified
CVE-2023-30769
Vulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, send it to individual nodes and take them offline.
CRITICAL 9.8EPSS 0.92%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.92%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Vulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.92% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-400
- Affected
- dogecoin/dogecoin
- Source
- disclosures@halborn.com
References
- https://www.halborn.com/blog/post/halborn-discovers-zero-day-impacting-dogecoin-and-280-networksThird Party Advisory
- https://www.halborn.com/disclosuresThird Party Advisory
- https://www.halborn.com/blog/post/halborn-discovers-zero-day-impacting-dogecoin-and-280-networksThird Party Advisory
- https://www.halborn.com/disclosuresThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.