CVE-2020-10937: 
IPFS vulnerability analysis and mitigation

The vulnerability (CVE-2020-10937) affects the InterPlanetary File System (IPFS) network, specifically targeting its Distributed Hash Table (DHT) implementation. The vulnerability was discovered by researchers from A-SIT and Graz University of Technology, who identified that attackers could generate ephemeral identities (Sybils) and exploit the IPFS connection management reputation system to poison other nodes' routing tables (IPFS Blog).

The vulnerability exploits weaknesses in libp2p's reputation system and DHT implementation. Attackers could create a Sybil attack using a massive pregenerated list of Peer IDs (approximately 29TB of data) to manipulate the reputation system. The attack specifically targeted the DHT's routing table management, taking advantage of the fact that the system didn't favor long-lived peers or protect peers in lower buckets. This allowed attackers to quickly evict honest peers from the routing table in favor of dishonest ones (IPFS Blog).

When successfully exploited, this vulnerability could lead to an eclipse attack, where an attacker could isolate a peer from the rest of the network, forcing the targeted peer to only communicate with attacker-controlled peers. This would effectively allow the attacker to take control of the target's routing table and disrupt their participation in the IPFS network (IPFS Blog).

The vulnerability was initially demonstrated on go-ipfs 0.4.23, where it could be executed with minimal resources from a single machine. The attack was verified through both live testing on hosted bootstrap nodes and replication testing using Testground, a testing environment for distributed systems (IPFS Blog).

The vulnerability has been addressed through several iterations of updates in go-ipfs versions 0.5, 0.6, and 0.7. Key mitigations include changes to how entries in the routing table are managed, preventing the eviction of available peers, implementing IP diversity requirements in the routing table, and fixing issues with the relay scoring system to prevent reputation gaming. These changes have increased the difficulty and cost of executing eclipse and Sybil attacks by several orders of magnitude (IPFS Blog).