CVE-2022-21685
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-21685
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-21685.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-21685
- Aliases
- Withdrawn
- 2024-05-15T05:34:03.146153Z
- Published
- 2022-01-14T17:15:13Z
- Modified
- 2023-11-29T09:25:12.271721Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Frontier is Substrate's Ethereum compatibility layer. Prior to commit number
8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664, a bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node crash for debug builds. For release builds (and production WebAssembly binaries), the impact is limited as it can only cause a normal EVM out-of-gas. Users who do not use MODEXP precompile in their runtime are not impacted. A patch is available in pull request #549. - References
Affected packages
Git / github.com/paritytech/frontier
Affected ranges
- Type
- GIT
- Repo
- https://github.com/paritytech/frontier
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
fc-consensus-v1.*
fc-consensus-v1.0.0
fc-consensus-v2.*
fc-consensus-v2.0.0
fc-db-v1.*
fc-db-v1.0.0
fc-mapping-sync-v1.*
fc-mapping-sync-v1.0.0
fc-rpc-core-v1.*
fc-rpc-core-v1.0.0
fc-rpc-v1.*
fc-rpc-v1.0.0
fp-consensus-v1.*
fp-consensus-v1.0.0
fp-evm-v1.*
fp-evm-v1.0.0
fp-evm-v2.*
fp-evm-v2.0.0
fp-rpc-v1.*
fp-rpc-v1.0.0
fp-rpc-v2.*
fp-rpc-v2.0.0
fp-rpc-v2.1.0
fp-storage-v1.*
fp-storage-v1.0.0
fp-storage-v1.0.1
fp-storage-v2.*
fp-storage-v2.0.0
pallet-dynamic-fee-v1.*
pallet-dynamic-fee-v1.0.0
pallet-dynamic-fee-v2.*
pallet-dynamic-fee-v2.0.0
pallet-dynamic-fee-v3.*
pallet-dynamic-fee-v3.0.0
pallet-ethereum-v1.*
pallet-ethereum-v1.0.0
pallet-ethereum-v2.*
pallet-ethereum-v2.0.0
pallet-ethereum-v3.*
pallet-ethereum-v3.0.0
pallet-evm-precompile-blake2-v1.*
pallet-evm-precompile-blake2-v1.0.0
pallet-evm-precompile-bn128-v1.*
pallet-evm-precompile-bn128-v1.0.0
pallet-evm-precompile-dispatch-v1.*
pallet-evm-precompile-dispatch-v1.0.0
pallet-evm-precompile-ed25519-v1.*
pallet-evm-precompile-ed25519-v1.0.0
pallet-evm-precompile-modexp-v1.*
pallet-evm-precompile-modexp-v1.0.0
pallet-evm-precompile-sha3fips-v1.*
pallet-evm-precompile-sha3fips-v1.0.0
pallet-evm-precompile-simple-v1.*
pallet-evm-precompile-simple-v1.0.0
pallet-evm-v3.*
pallet-evm-v3.0.0
pallet-evm-v4.*
pallet-evm-v4.0.0
pallet-evm-v5.*
pallet-evm-v5.0.0