Security Advisory

CVE-2023-23631

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-09 20:46:22

Last updated 2025-03-10 21:14:10

Assigner GitHub_M

State PUBLISHED

Description

github.com/ipfs/go-unixfsnode is an ADL IPLD prime node that wraps go-codec-dagpbs implementation of protobuf to enable pathing. In versions priot to 1.5.2 trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by bogus fanout parameter in the HAMT directory nodes. Users are advised to upgrade. There are no known workarounds for this vulnerability.

← Browse all CVEs View on cve.org ↗