PT-2025-36637 · Crates.Io · Frost-Core
Publicado
2025-09-03
·
Atualizado
2025-09-03
CVSS v4.0
6.0
Média
| Vetor | AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Impact
It was not clear that it is not possible to change
min signers (i.e. the threshold) with the refresh share functionality (frost core::keys::refresh module). Using a smaller value would not decrease the threshold, and attempts to sign using a smaller threshold would fail. Additionally, after refreshing the shares with a smaller threshold, it would still be possible to sign with the original threshold; however, this could cause a security loss to the participant's shares. We have not determined the exact security implications of doing so and judged simpler to just validate min signers.If for some reason you have done a refresh share procedure with a smaller
min signers we strongly recommend migrating to a new key.Patches
Updating to 2.2.0 will ensure that the
min signers parameter will be validated. However it won't restore the security of groups refreshed with a smaller min signers parameters.Workarounds
You don't need to update if you don't use the refresh share functionality, or if you didn't try to change the
min signers parameter using the refresh share functionality.References
Thank you BlockSec for reporting the finding
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Frost-Core