400 matches found
Consensus Halt
github.com/cosmos/cosmos-sdk encounters a consensus halt. An attacker with the ability to send transactions on any chain with the authz module enabled can halt that chain using many Grants, with different but close expiration times as it uses non-deterministic behaviour in a ValidateBasic method ...
CVE-2021-42766
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service long-range consensus chain reorganizations, even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an...
CVE-2021-42764
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service delayed consensus decisions, and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain...
CVE-2021-42765
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service indefinite stalling of consensus decisions...
CVE-2021-42764
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service delayed consensus decisions, and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain...
CVE-2021-42765
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service indefinite stalling of consensus decisions...
CVE-2021-42766
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service long-range consensus chain reorganizations, even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an...
Design/Logic Flaw
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service delayed consensus decisions, and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain...
Design/Logic Flaw
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service long-range consensus chain reorganizations, even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an...
Design/Logic Flaw
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service indefinite stalling of consensus decisions...
CVE-2021-42764
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service delayed consensus decisions, and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain...
CVE-2021-42764
Technical details (affected components, root cause, impacted versions, fixes) are not publicly available in the provided documents; monitor for updates.
CVE-2021-42765
Technical details about CVE-2021-42765 are not publicly available in the provided documents; monitor for updates.
CVE-2021-42765
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service indefinite stalling of consensus decisions...
CVE-2021-42766
Technical details (affected products, root cause, specific versions, fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2021-41135
The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...
CVE-2021-41135
The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...
Authorization
The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...
CVE-2021-41135
Summary: CVE-2021-41135 affects the Cosmos-SDK’s x/authz module where Grant.ValidateBasic() non-deterministically compares the grant expiration time to the node clock, enabling a chain with the authz feature enabled to halt via crafted transactions. This is reported for affected SDK versions, wit...
CVE-2021-41135 Authz Module Non-Determinism
The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...