RUSTSEC-2021-0109: 
Rust vulnerability analysis and mitigation

A critical vulnerability was discovered in the ckb crate (Rust) prior to version 0.40.0, identified as RUSTSEC-2021-0109 (CVE-2021-45700). The vulnerability affects the Nervos CKB blockchain node implementation and was disclosed in December 2021. The issue allows attackers to cause a denial of service condition by manipulating dead cells as DepGroup in transactions (NVD, GitHub Advisory).

The vulnerability received a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The technical issue involves the manipulation of dead cells used as DepGroup in transactions, which can trigger a crash in the blockchain node (NVD).

When exploited, this vulnerability enables attackers to crash all receiving Nervos CKB blockchain nodes, effectively creating a denial of service condition. The impact is particularly severe as it affects the network's availability without requiring special privileges or user interaction (GitHub Advisory).

The vulnerability is considered highly exploitable due to its network accessibility (AV:N) and low attack complexity (AC:L). No special privileges or user interaction is required to exploit this vulnerability, making it particularly dangerous (NVD).

The vulnerability has been patched in version 0.40.0 of the ckb crate. Users are strongly advised to upgrade to this version or later to mitigate the risk (GitHub Advisory).