Incorrect parsing of EVM reversion exit reason in RPC

🗓️ 18 Aug 2022 19:18:25Reported by GitHub Advisory DatabaseType

Incorrect parsing of EVM reversion exit reason in RPC Impact, low severity security issue, affected parsing of RPC result of exit reason in EVM reversion, causing incorrect parsing in release build and overflow panic in debug build. No action needed unless using RPC for distinguish reversion exit reasons with bridge node

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-36008	20 Aug 202200:17	–	circl
CNNVD	Frontier 输入验证错误漏洞	19 Aug 202200:00	–	cnnvd
CVE	CVE-2022-36008	19 Aug 202220:25	–	cve
Cvelist	CVE-2022-36008 Message length overflow in frontier	19 Aug 202220:25	–	cvelist
EUVD	EUVD-2022-6586	3 Oct 202520:07	–	euvd
NVD	CVE-2022-36008	19 Aug 202221:15	–	nvd
OSV	GHSA-MJVM-MHGC-Q4GP Incorrect parsing of EVM reversion exit reason in RPC	18 Aug 202219:18	–	osv
Prion	Code injection	19 Aug 202221:15	–	prion
Positive Technologies	PT-2022-23107 · Frontier · Frontier	18 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-36008	5 Feb 202522:48	–	redhatcve

Vulners

Node

fc-rpcRange≤1.0.0rust

Source	Link
github	www.github.com/paritytech/frontier/security/advisories/GHSA-mjvm-mhgc-q4gp
github	www.github.com/paritytech/frontier/pull/820
github	www.github.com/paritytech/frontier/commit/fff8cc43b7756ce3979a38fc473f38e6e24ac451
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-36008
github	www.github.com/advisories/GHSA-mjvm-mhgc-q4gp

24 Oct 2024 21:48Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5 - 7.1

EPSS0.00966

SSVC

CWE-190