POJIA破甲
地图 / Inverted ternary in peerlist_manager::filter() allows unlimited whitelist entries per host via different ports

Inverted ternary in peerlist_manager::filter() allows unlimited whitelist entries per host via different ports

业务逻辑 / Unlabeled / #3547349

厂商
Monero
严重程度
未评级
赏金
—
弱点
Unlabeled
研究员
@kklam32
披露日期
2026-06-29
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(8277 字符中的一小部分)
`peerlist_manager::filter()` in `src/p2p/net_peerlist.h` has incorrect ternary that operates on the wrong peer list.
原文中的代码

template<typename F> size_t peerlist_manager::filter(bool white, const F &f)
  {
    size_t filtered = 0;
    TRY_ENTRY();
    CRITICAL_REGION_LOCAL(m_peerlist_lock);
    peers_indexed::index<by_addr>::type& sorted_index = white ? m_peers_gray.get<by_addr>() : m_peers_white.get<by_addr>(); …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Monero 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @kklam32 · 版权归作者与 Monero 所有

同类报告

Golden techniques to bypass host validations in Android apps██████ · —Lack of Rate Limiting on Account Creation EndpointXVIDEOS · 2025-01-16 · $200SMAP bypassPlayStation · 2021-05-27Rate limit bypass on passport.acronis.work using X-Forwarded-For request headerAcronis · 2024-11-28Able to bypass authorization logic and gain more access then intendedGitHub · 2026-07-15Using special IPv4-mapped IPv6 addresses to bypass local IP banCloudflare Public Bug Bounty · 2023-01-24 · $7,500