{"id":"GHSA-hjqq-29pw-96wj","aliases":[],"status":"published","title":"Nervos CKB node panics when processing a block which parent timestamp is too new","description":"### Impact\n\nAdversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. \n\n### Patches\n\nPlease upgrade to v0.34.1","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-02-02T22:23:11Z","modified":"2024-02-02T22:23:13Z","fixes":[{"ecosystem":"crates.io","package":"ckb","fixed_in":["0.33.2","0.34.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"ckb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.33.0"},{"fixed":"0.33.2"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"ckb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.34.0"},{"fixed":"0.34.1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"ckb","ranges":[{"type":"SEMVER","events":[{"introduced":"0.33.0"},{"fixed":"0.33.2"}]}]},{"source":"osv","ecosystem":"crates.io","package":"ckb","ranges":[{"type":"SEMVER","events":[{"introduced":"0.34.0"},{"fixed":"0.34.1"}]}]}],"references":[{"url":"https://github.com/nervosnetwork/ckb/security/advisories/GHSA-hjqq-29pw-96wj","tags":["web"]},{"url":"https://github.com/nervosnetwork/ckb/commit/ae3c791068f2f76c67cd5483501f09de3fd8cc0b","tags":["web"]},{"url":"https://github.com/nervosnetwork/ckb/commit/c6725bb0659b6639f384d699f815117d76107388","tags":["web"]},{"url":"https://github.com/advisories/GHSA-hjqq-29pw-96wj"}],"sources":{"ghsa":[{"id":"GHSA-hjqq-29pw-96wj","title":"Nervos CKB node panics when processing a block which parent timestamp is too new","description":"### Impact\n\nAdversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. \n\n### Patches\n\nPlease upgrade to v0.34.1","status":"published","published":"2024-02-02T22:23:11Z","modified":"2024-02-02T22:23:13Z","updated_at":"2026-11-02T14:37:35.293818Z"}],"osv":[{"id":"GHSA-hjqq-29pw-96wj","title":"Nervos CKB node panics when processing a block which parent timestamp is too new","description":"### Impact\n\nAdversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. \n\n### Patches\n\nPlease upgrade to v0.34.1","status":"published","published":"2024-02-02T22:23:11Z","modified":"2024-02-02T22:23:11Z","updated_at":"2026-11-02T15:46:49.28217Z"}]}}