PT-2023-29214 · Gnark · Gnark

Kustosz · Published 2023-10-04 · Updated 2023-10-13 · CVE-2023-44378

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions gnark versions prior to 0.9.0

Description The issue concerns the construction of two valid decompositions to bits for some in-circuit values, due to overflowing the field where the values are defined. This allows a malicious prover to construct a valid proof for a statement a < b even if a > b. The problem impacts users using API.Cmp or API.IsLess methods, as well as those using bits.ToBinary or API.ToBinary methods with full-width decomposition.

Recommendations Upgrading to version 0.9.0 should fix the issue without needing to change the calls to value comparison methods. Alternatively, users can use the std/math/cmp gadget, which allows bounding the number of bits being compared, making comparisons more efficient if the bound on the absolute difference of the values is known.

Exploit

Fix

Integer Underflow

Weakness Enumeration

CWE-191

CWE-697

Related Identifiers

CVE-2023-44378

GHSA-498W-5J49-VQJG

GO-2023-2098

Affected Products

Gnark

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/44xxx/CVE-2023-44378.json · Exploit
• https://github.com/Consensys/gnark/security/advisories/GHSA-498w-5j49-vqjg · Patch
• https://github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f · Patch
• https://osv.dev/vulnerability/GHSA-498w-5j49-vqjg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44378 · Security Note
• https://osv.dev/vulnerability/CVE-2023-44378 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-2098 · Vendor Advisory
• https://github.com/Consensys/gnark · Note
• https://github.com/Consensys/gnark/pull/835 · Note
• https://github.com/zkopru-network/zkopru/issues/116 · Note
• https://t.me/cibsecurity/71842 · Telegram Post
• https://github.com/advisories/GHSA-498w-5j49-vqjg · Note