CVE-2022-47547

Published: Dec 19, 2022Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though it continuously misbehaves by never forwarding topic messages.

Affected (1)

Products: Protocol: Gossipsub

Protocol

1 product

Gossipsub

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Protocol Gossipsub	Version 1.1

Related CWEs

CWE-281

Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (2)

https://arxiv.org/pdf/2212.05197.pdf

Source: cve@mitre.org

ExploitTechnical DescriptionThird Party Advisory

https://arxiv.org/pdf/2212.05197.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTechnical DescriptionThird Party Advisory

Timeline

No history available yet.