1 result · Clear filters · Feed
-
Low 3.7
Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length
### Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node accepts inbound P2P connections (`network.listen_addr` is set, which is the default). ### Summary The P2P codec's `Codec::decode()` method calls `src.reserve…