PT-2021-23120 · Unknown+2 · Pallet-Ethereum+3

Librelois + 1 · Published 2021-10-13 · Updated 2021-10-20 · CVE-2021-41138

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Substrate's Frontier (affected versions not specified)

Description The issue concerns Substrate's Ethereum compatibility layer, Frontier. In the newly introduced signed Frontier-specific extrinsic for pallet-ethereum, a large part of transaction validation logic was only called in transaction pool validation, but not in block execution. This allows malicious validators to put invalid transactions into a block. Although the signature is always validated and the majority of the validation is done again in the subsequent pallet-evm execution logic, a chain ID replay attack was possible. Additionally, spamming attacks are a concern but are limited by Substrate block size limits and other factors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-41138

GHSA-VJ62-G63V-F8MF

Affected Products

Frontier

Substrate

Pallet-Ethereum

Pallet-Evm

References · 9

• https://github.com/paritytech/frontier/security/advisories/GHSA-vj62-g63v-f8mf · Patch
• https://github.com/paritytech/frontier/pull/497 · Patch
• https://github.com/paritytech/frontier/commit/146bb48849e5393004be5c88beefe76fdf009aba · Patch
• https://osv.dev/vulnerability/GHSA-vj62-g63v-f8mf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41138 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41138 · Security Note
• https://github.com/paritytech/frontier/pull/495 · Note
• https://github.com/polkadot-evm/frontier · Note
• https://t.me/cibsecurity/30525 · Telegram Post