GHSA-93p5-8fqw-wjx3

ghsaUSosv

Authentication bypass by capture-replay in github.com/cosmos/ethermint

view advisory published 2022-02-15Licence: CC-BY-4.0

Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application. ### Specific Go Packages Affected github.com/cosmos/ethermint/rpc/namespaces/eth

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-25834US	high7.5OT elevated	1.15% (67th)	—	2021-02-08
Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay…

references

External citations — patches, advisories, analysis.

https://github.com/cosmos/ethermint/commit/d7bdbd7488644f0aaeee5cdcdc119c863f199f72WEB
https://github.com/cosmos/ethermint/issues/686WEB
https://github.com/cosmos/ethermint/releases/tag/v0.4.1WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-25834ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan