GHSA-wjxc-pjx9-4wvm: 
Rust vulnerability analysis and mitigation

A high-severity vulnerability was identified in Nervos CKB (versions <= 0.34.1) where the CKB process could panic when receiving malformed P2P messages due to issues with the Snappy compression implementation (GitHub Advisory). The vulnerability was discovered by researcher 'quake' and was published on August 12, 2020.

The vulnerability (GHSA-wjxc-pjx9-4wvm) is related to the handling of compressed network messages using the Snappy compression algorithm in the CKB implementation. When malformed P2P messages are received, the process fails to handle them gracefully, resulting in a panic condition (GitHub Advisory).

When exploited, this vulnerability causes the CKB process to panic upon receiving malformed P2P messages, potentially leading to service disruption (GitHub Advisory).

The vulnerability can be triggered by sending malformed P2P messages to a CKB node running an affected version of the software (GitHub Advisory).

The vulnerability has been patched in version 0.34.2 of the CKB software. Users are advised to upgrade to this version or later to mitigate the vulnerability (GitHub Advisory).