PT-2024-40422 · Crates.Io · Ckb

Published 2024-02-03 · Updated 2024-02-03

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns a nondeterministic verification of transactions in the tx-pool when the inputs' script contains load cell data hash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-Q73F-W3H7-7WCC

Affected Products

Ckb

References · 5

• https://osv.dev/vulnerability/GHSA-q73f-w3h7-7wcc · Vendor Advisory
• https://github.com/nervosnetwork/ckb/commit/01eb5b2ecadf7e421b117d6c013e182978746e2f · Note
• https://github.com/nervosnetwork/ckb/commit/ff88b48779358e038209f3ac1bc1061e6f4deb13 · Note
• https://github.com/nervosnetwork/ckb/security/advisories/GHSA-q73f-w3h7-7wcc · Note
• https://github.com/nervosnetwork/ckb/commit/fe83220905599e72c97878295f4769e91348d738 · Note