Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform light client verification (e.g. IBC-rs, Hermes). The light client does not check that the chain IDs of the trusted and untrusted headers match, resulting in a possible attack vector where someone who finds a header from an untrusted chain that satisfies all other verification conditions (e.g. enough overlapping validator signatures) could fool a light client. The attack vector is currently theoretical, and no proof-of-concept exists yet to exploit it on live networks. This issue is patched in version 0.28.0. There are no workarounds.
References
| Link | Resource |
|---|---|
| https://github.com/informalsystems/tendermint-rs/security/advisories/GHSA-xqqc-c5gw-c5r5 | Third Party Advisory |
| https://github.com/informalsystems/tendermint-rs/security/advisories/GHSA-xqqc-c5gw-c5r5 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:48
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| References | () https://github.com/informalsystems/tendermint-rs/security/advisories/GHSA-xqqc-c5gw-c5r5 - Third Party Advisory |
Information
Published : 2022-12-15 19:15
Updated : 2024-11-21 06:48
NVD link : CVE-2022-23507
Mitre link : CVE-2022-23507
CVE.ORG link : CVE-2022-23507
JSON object : View
Products Affected
tendermint-light-client-js_project
- tendermint-light-client-js
tendermint-light-client_project
- tendermint-light-client
tendermint-light-client-verifier_project
- tendermint-light-client-verifier
CWE
CWE-347
Improper Verification of Cryptographic Signature