Chainsafe vulnerabilities

Products

• Ethermint 4

Newest

• chainsafe lodestar Integer Overflow in Lodestar CVE-2022-29219 Fix available 7.5 HighMay 24, 2022
• chainsafe js-libp2p-noise Failure to validate signature during handshake in @chainsafe/libp2p-noise CVE-2022-24759 Fix available 8.1 HighMarch 17, 2022
• chainsafe ethermint Authentication bypass by capture-replay in github.com/cosmos/ethermint CVE-2021-25835 Fix available 7.5 HighFebruary 8, 2021
• chainsafe ethermint Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage chang… CVE-2021-25837 Public exploit 7.5 HighFebruary 8, 2021
• chainsafe ethermint Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is furthe… CVE-2021-25836 7.5 HighFebruary 8, 2021
• chainsafe ethermint Authentication bypass by capture-replay in github.com/cosmos/ethermint CVE-2021-25834 Fix available 7.5 HighFebruary 8, 2021