CVE-2020-12821
- State
- Published
- Severity
- Not scored
- Published
- Jul 7, 2020
- Updated
- Aug 4, 2024
- Reserved
- May 12, 2020
Description
Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/libp2p/specs/tree/master/pubsub/gossipsub
- https://github.com/libp2p/specs/blob/master/pubsub/gossipsub/gossipsub-v1.1.md
- https://bitcoin.stackexchange.com/questions/61151/eclipse-attack-vs-sybil-attack
- https://github.com/ipfs/blog/pull/450
- https://gateway.ipfs.io/ipfs/QmPWuNBs8h6a8KamRvGqhTq5UDYJRQsEEy37zDKjujQQQm/Gossipsub%20Evaluation%20Report.pdf
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.