CVE-2025-29606

Summary

py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.

Affected Software

Weaknesses

• CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/libp2p/py-libp2p/issues/526
• https://github.com/libp2p/py-libp2p/pull/531/files
• https://github.com/libp2p/py-libp2p/compare/v0.2.2…v0.2.3

• ←Previous
• Next→