PT-2019-18447 · Electric Coin Company · Zcash

Ariel Gabizon · Published 2019-03-27 · Updated 2024-01-15 · CVE-2019-7167

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zcash versions before the Sapling network upgrade (2018-10-28)

Description The issue concerns a counterfeiting vulnerability in the key-generation process related to polynomial evaluation for a to-be-proven statement. This allowed a cheating prover to bypass a consistency check, transforming the proof of one statement into an ostensibly valid proof of a different statement. As a result, the soundness of the proof system was broken, misleading the original Sprout zk-SNARK verifier into accepting the correctness of a transaction.

Recommendations For Zcash versions before the Sapling network upgrade (2018-10-28), update to a version that includes the Sapling network upgrade to resolve the issue.

Exploit

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2019-7167

Affected Products

Zcash

References · 6

• 🔥 https://github.com/JinBean/CVE-Extension · Exploit
• https://osv.dev/vulnerability/CVE-2019-7167 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7167 · Security Note
• https://z.cash/blog/zcash-counterfeiting-vulnerability-successfully-remediated · Vendor Advisory
• https://twitter.com/zooko/status/1747045748837945655 · Twitter Post
• http://fortune.com/2019/02/05/zcash-vulnerability-cryptocurrency · Note