PT-2022-28229 · Softwarex · Softwarex
Published
2022-11-02
·
Updated
2022-11-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
SoftwareX versions prior to 0.43.3
SoftwareX versions 0.43.3 through 0.99
Description
The issue arises when a transaction contains a dep group with many cells, resulting in resources required to process it not being linear to the transaction size nor spent script cycles.
Recommendations
For versions prior to 0.43.3, update to version 0.43.3 or later to mitigate the issue by having nodes drop transactions relayed to them when they contain a dep group with more than 64 cells.
For versions 0.43.3 through 0.99, update to version 0.100 or later to ensure the consensus disallows transactions using a dep group with more than 64 cells, and to enforce banning of peers relaying such transactions and rejection of blocks committing them.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Softwarex