Skip to content
Threat Feed
Subscribe

Product

Py-Libp2p (<= 0.6.0)

1 brief RSS
medium advisory

py-libp2p yamux Connection DoS via Oversized Data Frame

A denial-of-service vulnerability in py-libp2p versions up to 0.6.0 allows an authenticated attacker to send a specially crafted 12-byte DATA or SYN frame with an oversized length field, causing the victim's yamux read loop to block indefinitely and freezing all streams on the affected connection.

py-libp2p denial-of-service vulnerability network python libp2p
1t