Lucene search
HistoryDec 19, 2022 - 9:15 a.m.
CVE-2022-47547
cve-2022-47547
gossipsub 1.1
ethereum 2.0
network vulnerability
misbehaving peer
topic messages
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
51.0%
GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though it continuously misbehaves by never forwarding topic messages.
Affected configurations
Node
protocolgossipsubMatch1.1
References
Related
prion
prion
Code injection
2022-12-19 09:15:00
cvelist
cvelist
CVE-2022-47547
2022-12-19 00:00:00
cve
cve
CVE-2022-47547
2022-12-19 09:15:09
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
51.0%
Related for NVD:CVE-2022-47547