CyberRota Analysis
AI-GeneratedThe vulnerability affects libp2p-rendezvous versions up to 0.17.1, where improper validation of registration TTL values in discovery responses can lead to a timer arithmetic overflow. This flaw allows a malicious rendezvous server to send a discovery response with an unbounded TTL, potentially causing client nodes to crash due to a panic in the expiry timer computation. Organizations utilizing affected versions should prioritize patching this vulnerability to prevent service disruptions and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when computing the expiry timer.