CVE-2020-11090
High
Description
In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. This is fixed in version 1.12.3.
SeverityHigh
CVSS7.5
Exploit probability—
ProductLinuxfoundation Indy-node
PublishedJun 11, 2020
First seenJun 11, 2020
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- indy-node1.12.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linuxfoundation indy-node | 1.12.2 | — |
| indy-nodePyPI | 1.12.2 ≤ v < 1.12.3, v < 1.12.3 | 1.12.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.