Firedancer v0.1

Reports by Severity

Medium | Insight

Medium

• Boost _ Firedancer v0.1 33347 - [Blockchain_DLT - Medium] Integer underflow leading to memory corruption in memcpy functionfd_bank

• Boost _ Firedancer v0.1 33348 - [Blockchain_DLT - Medium] Integer underflow leading to memory corruption in memcpy functionfd_poh

• Boost _ Firedancer v0.1 33378 - [Blockchain_DLT - Medium] OOB Write leading to memory corruption in fd_memcpyfd_sign

• Boost _ Firedancer v0.1 33669 - [Blockchain_DLT - Medium] fd_quic_process_packet out of bounds read

• Boost _ Firedancer v0.1 33717 - [Blockchain_DLT - Medium] Memory corruption caused by fully controllable src and sz in memcpy operationsfd_poh

• Boost _ Firedancer v0.1 33718 - [Blockchain_DLT - Medium] The malicious fd_shred_t data passed between fd_shred and fd_store causes the Solana Rust code to crashfd_store

• Boost _ Firedancer v0.1 33774 - [Blockchain_DLT - Medium] The malicious fd_txn_p_t data passed between fd_pack and fd_bank causes memory corruptionevent crash in rustfd_bank

• Boost _ Firedancer v0.1 33936 - [Blockchain_DLT - Medium] shred tile fails to process zero sized udp packets

• Boost _ Firedancer v0.1 34064 - [Blockchain_DLT - Medium] bank tile possible code execution

• Boost _ Firedancer v0.1 34272 - [Blockchain_DLT - Medium] Remote memory corruption in Shred tile

• Boost _ Firedancer v0.1 34290 - [Blockchain_DLT - Medium] bank tile overflow

• Boost _ Firedancer v0.1 34501 - [Blockchain_DLT - Medium] DoS in shreds validation

• Boost _ Firedancer v0.1 34564 - [Blockchain_DLT - Medium] shred tile overflow

• Boost _ Firedancer v0.1 34682 - [Blockchain_DLT - Medium] DoS in shreds validation

Insight

• Boost _ Firedancer v0.1 33586 - [Blockchain_DLT - Insight] fd_ebpf_static_link - possible disclosure of stack memory

• Boost _ Firedancer v0.1 33862 - [Blockchain_DLT - Insight] Discord Server Vulnerable to Takeover in Firedancer Repository

• Boost _ Firedancer v0.1 34234 - [Blockchain_DLT - Insight] Setting the variable shred_cnt in the shred object to bypasses the security checks within the fd_store structure

Reports by Type

Blockchain/DLT

Blockchain/DLT

• Boost _ Firedancer v0.1 33347 - [Blockchain_DLT - Medium] Integer underflow leading to memory corruption in memcpy functionfd_bank

• Boost _ Firedancer v0.1 33348 - [Blockchain_DLT - Medium] Integer underflow leading to memory corruption in memcpy functionfd_poh

• Boost _ Firedancer v0.1 33378 - [Blockchain_DLT - Medium] OOB Write leading to memory corruption in fd_memcpyfd_sign

• Boost _ Firedancer v0.1 33586 - [Blockchain_DLT - Insight] fd_ebpf_static_link - possible disclosure of stack memory

• Boost _ Firedancer v0.1 33669 - [Blockchain_DLT - Medium] fd_quic_process_packet out of bounds read

• Boost _ Firedancer v0.1 33717 - [Blockchain_DLT - Medium] Memory corruption caused by fully controllable src and sz in memcpy operationsfd_poh

• Boost _ Firedancer v0.1 33718 - [Blockchain_DLT - Medium] The malicious fd_shred_t data passed between fd_shred and fd_store causes the Solana Rust code to crashfd_store

• Boost _ Firedancer v0.1 33774 - [Blockchain_DLT - Medium] The malicious fd_txn_p_t data passed between fd_pack and fd_bank causes memory corruptionevent crash in rustfd_bank

• Boost _ Firedancer v0.1 33862 - [Blockchain_DLT - Insight] Discord Server Vulnerable to Takeover in Firedancer Repository

• Boost _ Firedancer v0.1 33936 - [Blockchain_DLT - Medium] shred tile fails to process zero sized udp packets

• Boost _ Firedancer v0.1 34064 - [Blockchain_DLT - Medium] bank tile possible code execution

• Boost _ Firedancer v0.1 34234 - [Blockchain_DLT - Insight] Setting the variable shred_cnt in the shred object to bypasses the security checks within the fd_store structure

• Boost _ Firedancer v0.1 34272 - [Blockchain_DLT - Medium] Remote memory corruption in Shred tile

• Boost _ Firedancer v0.1 34290 - [Blockchain_DLT - Medium] bank tile overflow

• Boost _ Firedancer v0.1 34501 - [Blockchain_DLT - Medium] DoS in shreds validation

• Boost _ Firedancer v0.1 34564 - [Blockchain_DLT - Medium] shred tile overflow

• Boost _ Firedancer v0.1 34682 - [Blockchain_DLT - Medium] DoS in shreds validation