PT-2023-29868 · Unknown · Rs-Stellar-Strkey

Yeggor · Published 2023-10-24 · Updated 2023-11-01 · CVE-2023-46135

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions rs-stellar-strkey versions prior to 0.0.8

Description A panic vulnerability occurs when a specially crafted payload is used, due to an issue with the inner payload len variable. This variable should not be above 64. The vulnerability is caused by an overflow in the calculation of inner payload len + (4 - inner payload len % 4) % 4, which can happen when inner payload len is set to a large value, such as 0xffffffff.

Recommendations For versions prior to 0.0.8, update to version 0.0.8 to resolve the issue. As a temporary workaround, consider sanitizing the input payload before it is passed to the vulnerable function, ensuring that the value of inner payload len is not above 64.

Exploit

Fix

Weakness Enumeration

CWE-248

Related Identifiers

CVE-2023-46135

GHSA-5873-6FWQ-463F

Affected Products

Rs-Stellar-Strkey

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46135.json · Exploit
• 🔥 https://github.com/stellar/rs-stellar-strkey/issues/58 · Exploit
• 🔥 https://github.com/stellar/rs-stellar-strkey/security/advisories/GHSA-5873-6fwq-463f · Exploit
• https://osv.dev/vulnerability/CVE-2023-46135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46135 · Security Note
• https://osv.dev/vulnerability/GHSA-5873-6fwq-463f · Vendor Advisory
• https://github.com/stellar/rs-stellar-strkey/commit/83adad0f5b1cda693c7ba8524d395add8077865f · Note
• https://github.com/stellar/rs-stellar-strkey · Note
• https://github.com/stellar/rs-stellar-strkey/releases/tag/v0.0.8 · Note
• https://github.com/stellar/rs-stellar-strkey/pull/59 · Note
• https://twitter.com/CVEnew/status/1716998207589474519 · Twitter Post