CVE-2021-45700
Process crashes when the cell used as DepGroup is not alive
Summary
Process crashes when the cell used as DepGroup is not alive
Original description
The description as published by the source.
It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
crates.io
ckb
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.40.0"}]}]
References
- advisory rustsec.org
- package crates.io