PT-2022-23042 · Ethermint+1 · Ethermint+1

Tomtau + 1 · Published 2022-08-05 · Updated 2024-08-21 · CVE-2022-35936

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Ethermint versions prior to v0.17.2 Ethermint versions prior to v0.18.0 are not affected if they are v0.17.2 or later, but since v0.17.2 is not a fixed version and only v0.18.0 is mentioned as fixed, we consider all versions before v0.18.0 as vulnerable. Cronos versions prior to v0.8.0

Description The issue arises when a contract invokes the selfdestruct function, which permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the DeleteAccount function, all contracts that used the identical bytecode will also stop working once one contract invokes selfdestruct. This can lead to a denial-of-service (DoS) for all contracts that share the same bytecode. No smart contracts were impacted through the use of this vulnerability due to successful coordinated security vulnerability disclosure. Smart contract states and storage values are not affected by this vulnerability.

Recommendations For Ethermint versions prior to v0.17.2, upgrade to version v0.18.0 or later. For Cronos versions prior to v0.8.0, upgrade to version v0.8.0 or later. As a temporary workaround, if a contract is subject to DoS due to this issue, the user can redeploy the same contract with identical bytecode to recover the original contract's code.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2022-35936

GHSA-F92V-GRC2-W2FG

GHSA-GWJ5-WP6R-5Q9F

GO-2022-0760

GO-2022-0829

Affected Products

Cronos

Ethermint

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35936.json · Exploit
• 🔥 https://github.com/evmos/ethermint/blob/c9d42d667b753147977a725e98ed116c933c76cb/x/evm/keeper/statedb.go#L199-L203 · Exploit
• https://github.com/evmos/ethermint/commit/144741832007a26dbe950512acbda4ed95b2a451 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-35936 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35936 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gwj5-wp6r-5q9f · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0829 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f92v-grc2-w2fg · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0760 · Vendor Advisory
• https://github.com/evmos/ethermint/security/advisories/GHSA-f92v-grc2-w2fg · Note
• https://github.com/evmos/ethermint · Note
• https://github.com/crypto-org-chain/cronos/security/advisories/GHSA-gwj5-wp6r-5q9f · Note
• https://github.com/crypto-org-chain/cronos · Note
• https://github.com/crypto-org-chain/cronos/commit/2f2cc88b501b47149690fdef05afbbbe5bc116c9 · Note
• https://t.me/cibsecurity/47609 · Telegram Post