Posts tagged devp2p.

Before reth PR #23718, eth-wire Transactions and PooledTransactions decoded into an unbounded Vec before any validation, so a well-formed 10 MB message could allocate 436 MB during decode without ever incrementing the peer-misbehaviour counter that only reacts to decode errors.

A go-ethereum eth-protocol peer that sends a GetBlockHeaders request with amount (count) set to 0 triggers an integer underflow — count-1 wraps to UINT64_MAX — bypassing the maxHeadersServe cap and forcing the node to serve headers back to genesis, a publicly disclosed memory-exhaustion DoS (CVE-2024-32972, fixed in geth 1.13.15) that NullRabbit reproduced as a lab detection bundle.