Posts tagged memory amp.

Before reth PR #23718, eth-wire Transactions and PooledTransactions decoded into an unbounded Vec before any validation, so a well-formed 10 MB message could allocate 436 MB during decode without ever incrementing the peer-misbehaviour counter that only reacts to decode errors.

Walrus storage-node's HTTP/2 server ships with `http2_max_pending_accept_reset_streams = u32::MAX`, disabling the post-CVE-2023-44487 accounting limit. An unauthenticated attacker forces rapid stream resets, accumulating unbounded pending-accept-reset state → memory pin → OOM with no GOAWAY to shed load.