CVE-2024-32985 Stellar-core's Overlay - security fix for DDoS mitigation
A race condition in Stellar-core allows attackers to crash nodes, causing temporary denial of service until the node restarts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-32985?
CVE-2024-32985 is a medium-severity vulnerability in stellar-core, published on 9 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly crashed due to a race condition with a 3rd party library. The likelihood of affecting the network is low since crashed nodes come back up online right away. Code fix mitigation is part of Stellar-core v20.4.0 release
Weakness: CWE-362
Which versions are affected by CVE-2024-32985?
How do I fix CVE-2024-32985?
No fix has been published for CVE-2024-32985 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-32985 being exploited?
There is no known exploitation of CVE-2024-32985 in the wild and no public exploit code.
Sources
Also known as GHSA-mgx8-frjx-x33m.