CVE-2025-29606

py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
mitreCNA
4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/libp2p/py-libp2p/compare/v0.2.2...v0.2.3
https://github.com/libp2p/py-libp2p/issues/526
https://github.com/libp2p/py-libp2p/pull/531/files