Lucene search
GoogleOSV:GHSA-2P6R-37P9-89P2HistoryOct 21, 2021 - 5:46 p.m.
Authz Module Non-Determinism
2021-10-2117:46:57
Google
osv.dev
8
non-determinism
consensus failure
user funds
patch 0.44.2
manual patching
security advisory
cosmos network
EPSS
0.001
Percentile
47.9%
Impact
Consensus failure for 0.43.x and 0.44.{0,1} users.
Funds and balances are safe.
Patches
0.44.2
Workarounds
Manually patch the code.
Full details posted in https://forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349.
References
forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349
github.com/cosmos/cosmos-sdk
github.com/cosmos/cosmos-sdk/commit/68ab790a761e80d3674f821794cf18ccbfed45ee
github.com/cosmos/cosmos-sdk/releases/tag/v0.44.2
github.com/cosmos/cosmos-sdk/security/advisories/GHSA-2p6r-37p9-89p2
nvd.nist.gov/vuln/detail/CVE-2021-41135
Related
prion
prion
Authorization
2021-10-20 18:15:00
github
github
Authz Module Non-Determinism
2021-10-21 17:46:57
cve
cve
CVE-2021-41135
2021-10-20 18:15:07
cvelist
cvelist
CVE-2021-41135 Authz Module Non-Determinism
2021-10-20 18:05:10
nvd
nvd
CVE-2021-41135
2021-10-20 18:15:07
osv
osv
CVE-2021-41135
2021-10-20 18:15:07