Every CVESearch/Get API key

GHSA-hjqq-29pw-96wj

Nervos CKB node panics when processing a block which parent timestamp is too new

No scoreFix available

GHSA-hjqq-29pw-96wj is a vulnerability with no CVSS score yet in ckb, published February 2, 2024. No source lists public exploit code. Fixed in ckb 0.33.2.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.33.2ckb +1 more

Description

Impact

Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future.

Patches

Please upgrade to v0.34.1

Affected packages

Affected packages
PackageAffectedFixed
ckb
crates.io
0.33.0 up to 0.33.2
0.33.2
ckb
crates.io
0.34.0 up to 0.34.1
0.34.1

What each source reports

GitHub AdvisoriesNo score

Nervos CKB node panics when processing a block which parent timestamp is too new

Impact

Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future.

Patches

Please upgrade to v0.34.1

Record
GHSA-hjqq-29pw-96wj
Updated
2026-11-02
OSVNo score

Nervos CKB node panics when processing a block which parent timestamp is too new

Impact

Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future.

Patches

Please upgrade to v0.34.1

Record
GHSA-hjqq-29pw-96wj
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open