PT-2024-40198 · Sp1 · Sp1

Published 2024-11-08 · Updated 2024-11-08

Positive Technologies (AI Summary)

CVSS v4.0

1.7

Low

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions: SP1 versions prior to 3.0.0

Description: The issue arises during proof generation, where the prover must observe all values sent to the verifier to generate valid Fiat-Shamir challenges. In versions prior to 3.0.0, the cumulative sum of the permutation argument was not observed when sampling zeta, a random challenge. This made it theoretically possible to exploit, although it would require a significant amount of computation and knowledge of cryptographic attacks. The issue was discovered during an audit and was fixed in version 3.0.0 by observing the cumulative sum into the challenger.

Recommendations: For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the permutation argument until a patch is available.

Fix

Related Identifiers

GHSA-8M24-3CFX-9FJW

Affected Products

Sp1

References · 4

• https://osv.dev/vulnerability/GHSA-8m24-3cfx-9fjw · Vendor Advisory
• https://github.com/succinctlabs/sp1 · Note
• https://github.com/succinctlabs/sp1/security/advisories/GHSA-8m24-3cfx-9fjw · Note
• https://github.com/succinctlabs/sp1/commit/79884ffb1a2d10bfd2c272f864033577a052468a · Note