Access Restriction Bypass in go-ipfs

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-10937 · ADVISORY
• blog.ipfs.io/2020-10-30-dht-hardening · WEB
• graz.pure.elsevier.com/en/publications/total-eclipse-of-the-heart-disrupting-the-interplanetary-file-sys · WEB
• blog.ipfs.io/2020-10-30-dht-hardening · Vendor Advisory
• GitHub Advisory GHSA-r23h-3jmw-q7hr · ADVISORY

github.com/ipfs/go-ipfs のその他の脆弱性

• GO-2022-0418Opened exploitable ports in default docker-compose.yaml in go-ipfs in github.com/ipfs/go-ipfs
• GHSA-f2gr-7299-487h中DOS and excessive memory usage when passing untrusted user input to to dag import
• GHSA-fx5p-f64h-93xc中 Opened exploitable ports in default docker-compose.yaml in go-ipfs
• CVE-2020-26283高 8.8go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8…
• CVE-2020-26279高 8.1go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8…