NRDAX-T0320 - Unbounded Connection Flood
Connection exhaustion · P2P and gossip · no bound · active · first seen 2020-01-01
provenance: Reproduced in NullRabbit's attack-reproduction pipeline
mechanism
CVE-2020-5303 (Lavender): unlimited CometBFT P2P connection requests → OOM + activeIDs-map saturation
live exposure
No exposure data. Slashr ↗ has no risk signal mapped to this technique yet — absence of data is not absence of exposure.
instances (7)
| chain | primitive | fidelity | origin | reproducer (bundle) | source |
|---|---|---|---|---|---|
| cosmos | cosmos_p2p_conn_flood | lab | reverse-engineered-cve | cosmos_p2p_conn_flood | GHSA-v24h-pjjv-mcp6 ↗ |
| ethereum | geth_tcp_handshake_flood | lab | reverse-engineered-cve | geth_tcp_handshake_flood | reports.immunefi.com ↗ |
| libp2p | libp2p_conn_resource_exhaustion | lab | reverse-engineered-cve | libp2p_conn_resource_exhaustion | GHSA-f44q-634c-jvwv ↗ |
| monero | monero_rpc_conn_exhaustion | lab | reverse-engineered-cve | monero_rpc_conn_exhaustion | CVE-2025-26819 ↗ |
| quic | dnsdist_doq_concurrent_conn_exhaustion | lab | reverse-engineered-cve | dnsdist_doq_concurrent_conn_exhaustion | - |
| solana | firedancer_metrics_flood_crash | lab | reverse-engineered-cve | firedancer_metrics_flood_crash | github.com ↗ |
| starknet | starknet_libp2p_noise_preauth_flood | lab | NullRabbit Labs | starknet_libp2p_noise_preauth_flood | - |
references
cve: CVE-2020-5303
related (Connection exhaustion)
NRDAX-T0041 - Cross-Chain Peer Pool Pollution active NRDAX-T0064 - Endpoint Concurrency Cap Exhaustion active NRDAX-T0099 - Half-Open Handshake Slowloris active NRDAX-T0214 - Protocol Message Flood Unbounded Goroutine active NRDAX-T0225 - QUIC Control Frame Flood active NRDAX-T0246 - Rate-Limit Key Confusion active NRDAX-T0261 - RPC Request Flood active NRDAX-T0291 - Subscription Permit Exhaustion active
cite
https://nrdax.com/techniques/NRDAX-T0320
plain
NRDAX Registry. Technique NRDAX-T0320.
bibtex
@misc{nrdax_NRDAX_T0320,
title = {Unbounded Connection Flood (NRDAX-T0320)},
howpublished = {NRDAX Registry},
url = {https://nrdax.com/techniques/NRDAX-T0320},
} json (csl)
{
"id": "nrdax-NRDAX-T0320",
"type": "dataset",
"title": "Unbounded Connection Flood (NRDAX-T0320)",
"URL": "https://nrdax.com/techniques/NRDAX-T0320",
"publisher": "NRDAX Registry"
} badge
[](https://nrdax.com/techniques/NRDAX-T0320-unbounded-connection-flood)
use from the CLI
Retrieve or cite this technique from a script or the terminal with the NRDAX Python library & CLI.
nrdax get NRDAX-T0320nrdax cite NRDAX-T0320 --format bibtex