Connection Count Bug in Monero Node Enables Outbound Peer Reset Attack
该报告还没有中文解读。
原文摘录
摘自原文（12961 字符中的一小部分）
Summary: We disclosed a vulnerability that could cause all outbound connections of a Monero node to be dropped. The vulnerability exploits a flaw in how the Monero node incorrectly counts the number of current outbound connections. An attacker can take advantage of this flaw to trick the node into …
原文中的代码
2025-06-09 12:05:54.472 I in mPeersLoggerThread, Update m_current_number_of_out_peers: 12 // -! Step (1) in the attack mechanism: the target node disconnects from one outbound connection 2025-06-09 12:05:54.972 I in get_outgoing_connections_count(), out conn count is : 11 2025-06-09 12:05:54.972 I …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Monero 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @yulge · 版权归作者与 Monero 所有