GHSA-84x2-2qv6-qg56
Nervos CKB P2P DoS Attacks
The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted tx_hashes, it will mark it in memory to avoid duplicated requests. code → .
It is easy to establish a DoS attach by generating random tx hashes.
Impact
It affects all nodes connected to the P2P network.
Workarounds
Apply rate limit on the data sent to CKB P2P port.
What each source reports
GitHub AdvisoriesNo score
Nervos CKB P2P DoS Attacks
The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted tx_hashes, it will mark it in memory to avoid duplicated requests. code → .
It is easy to establish a DoS attach by generating random tx hashes.
Impact
It affects all nodes connected to the P2P network.
Workarounds
Apply rate limit on the data sent to CKB P2P port.
- Record
GHSA-84x2-2qv6-qg56- Updated
- 2026-11-02
OSVNo score
Nervos CKB P2P DoS Attacks
The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted tx_hashes, it will mark it in memory to avoid duplicated requests. code → .
It is easy to establish a DoS attach by generating random tx hashes.
Impact
It affects all nodes connected to the P2P network.
Workarounds
Apply rate limit on the data sent to CKB P2P port.
- Record
GHSA-84x2-2qv6-qg56- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ckbcrates.io | before 0.34.0 | 0.34.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-84x2-2qv6-qg56 is a vulnerability with no CVSS score yet in ckb, published February 2, 2024. No source lists public exploit code. Fixed in ckb 0.34.0.