Skip to content
OpenAdvisories

Package · crates.io

zebra-network

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length

    ### Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node accepts inbound P2P connections (`network.listen_addr` is set, which is the default). ### Summary The P2P codec's `Codec::decode()` method calls `src.reserve…