P2P Kad NodeTable pollution vulnerability using p2p neighbor protocol

ethereumproject / go-ethereum

Go language implementation of the original/classic design of the Ethereum protocol

GNU Lesser General Public License v3.0

441 stars 166 forks source link

P2P Kad NodeTable pollution vulnerability using p2p neighbor protocol #707

Closed ohJohanZ closed 5 years ago

ohJohanZ commented 5 years ago

The blockchain running p2p-discv4 will pollution NodeTable each other, this may cause a Node DoS problem, or slow down p2p network.

Reproduction: Try ping an ETC node, repeatedly send neighbor list contain large number of ETH node addresses, then the "dirty node address" will spread all over the MainNet node. ETC nodetabe will contain large number of ETH nodes.