PT-2023-24890 · Multiversx · Mx-Chain-Go

Iulianpascalau · Published 2023-07-13 · Updated 2024-08-20 · CVE-2023-34458

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions mx-chain-go versions prior to 1.4.17

Description The issue occurs when executing a relayed transaction in mx-chain-go, the official implementation of the MultiversX blockchain protocol. If the inner transaction fails, it increases the inner transaction's sender account nonce, potentially contributing to a limited Denial of Service (DoS) attack on a targeted account. This is a strict processing issue that happens while validating blocks on a chain.

Recommendations For versions prior to 1.4.17, update to version 1.4.17 or later to resolve the issue. As a temporary workaround, consider restricting the use of relayed transactions until the update is applied. Avoid using the RelayedNonceFixEnableEpoch flag in versions prior to 1.4.17, as it is not applicable.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-34458

GHSA-J494-7X2V-VVVP

GO-2023-1912

Affected Products

Mx-Chain-Go

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34458.json · Exploit
• https://github.com/multiversx/mx-chain-go/security/advisories/GHSA-j494-7x2v-vvvp · Vendor Advisory
• https://github.com/multiversx/mx-chain-go/commit/babdb144f1316ab6176bf3dbd7d4621120414d43 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-34458 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34458 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-1912 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j494-7x2v-vvvp · Vendor Advisory
• https://github.com/multiversx/mx-chain-go · Note
• https://github.com/multiversx/mx-chain-go/releases/tag/v1.4.17 · Note
• https://github.com/multiversx/mx-chain-go/blob/babdb144f1316ab6176bf3dbd7d4621120414d43/integrationTests/vm/txsFee/relayedMoveBalance_test.go#LL165C14-L165C14 · Note
• https://t.me/cibsecurity/66687 · Telegram Post