Skip to content

[Security] DOS of route messages #10

@Aras14HD

Description

@Aras14HD

What vulnerability did you find?
A node could stop route messages from reaching the intended recipient.

How do you attack using the vulnerability?
A node could report their distance to the victim as 0 or even set their UUID to that of the victim, so that route messages intended for the victim would be routed to them instead.

How might you fix this

  1. A broadcast subtype could be added as a fallback, that would be used if responses to route messages, that aren't "not reachable" (status 1), all have the wrong signature.
  2. If a node that has a distance of 0 to the recipient of a route message or is the recipient of a route message, responds with (only) "not reachable" (status 1), the node relaying the route message to them will calculate the distance without them, internally set their distance to on higher than itself and send the route message again.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions