PT-2025-7250 · Unknown · Packet Forward Middleware

Published 2025-02-12 · Updated 2025-02-12

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Packet Forward Middleware versions prior to 7.2.1 Packet Forward Middleware versions prior to 8.1.1

Description: The issue affects chains using affected versions of Packet Forward Middleware in their IBC Transfer stack, making them vulnerable to a potential denial of service attack. This impacts IBC transfers for any asset being transferred between another chain and its native chain.

Recommendations: For versions prior to 7.2.1, upgrade to version 7.2.1 or later. For versions prior to 8.1.1, upgrade to version 8.1.1 or later.

Fix

Related Identifiers

GHSA-6FGM-X6FF-W78F

Affected Products

Packet Forward Middleware

References · 5

• https://osv.dev/vulnerability/GHSA-6fgm-x6ff-w78f · Vendor Advisory
• https://github.com/cosmos/ibc-apps/security/advisories/GHSA-6fgm-x6ff-w78f · Note
• https://github.com/cosmos/ibc-apps/releases/tag/middleware%2Fpacket-forward-middleware%2Fv8.1.1 · Note
• https://github.com/cosmos/ibc-apps/releases/tag/middleware%2Fpacket-forward-middleware%2Fv7.2.1 · Note
• https://github.com/cosmos/ibc-apps · Note