Linuxfoundation Indy-Node vulnerabilities

4 CVEs affecting Linuxfoundation Indy-Node, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31006, published 2022-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-31020, published 2022-09-06. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request handler in Indy-Node allows an improperly…
CVE-2020-11090, published 2020-06-11. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a…
CVE-2020-11093, published 2020-12-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a…
CVE-2022-31006, published 2022-09-09. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client…