The vulnerability in libp2p-rendezvous (<=0.17.1) involves improper validation of TTL values in discovery responses. An attacker controlling a rendezvous server can send a discovery response with a TTL value large enough to cause integer overflow during timer calculations. This results in a panic in the client node process, causing a denial of service condition. The CVSS 3.1 score is 7.5 (high severity) with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service).

Exploitation of this vulnerability leads to denial of service by causing the client node process to panic and crash. There is no impact on confidentiality or integrity. The attack can be performed remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid connecting to untrusted rendezvous servers or implement input validation on TTL values if possible.