Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2023-0031

Good to know:

icon
icon

Date: November 3, 2024

In all versions from 0.100.0 of ckb, the calculation of program load cycles may be missed when executing in resume mode. Since the script execution order is now determined, this issue does not cause network splitting.

Language: RUST

Severity Score

Related Resources (4)

https://github.com/nervosnetwork/ckb/commit/612c58dd885a6fb4dbf2de372272465b80b879de
https://github.com/nervosnetwork/ckb
https://github.com/nervosnetwork/ckb/security/advisories/GHSA-fjj4-2q73-jvgc
https://www.mend.io/vulnerability-database/WS-2023-0031

Severity Score

Weakness Type (CWE)

Incorrect Calculation

CWE-682

Top Fix

icon

Upgrade Version

Upgrade to version ckb - 0.103.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us