1 result · Feed
-
High 7.5
Remote DoS through unchecked `IdList` allocation in negentropy
## Summary The `negentropy` crate is vulnerable to denial-of-service through an unchecked, peer-controlled ID count in reconciliation messages. With the `std` feature enabled, which is the default configuration, a small malformed message can trigger an enormo…