Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cache data will be discarded at EndBlock, it is still valid in the current block, which enables many possible attacks such as an "arbitrary mint token".
References
Link | Resource |
---|---|
https://github.com/cosmos/ethermint/issues/667#issuecomment-759284107 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-02-08T17:54:37
Updated: 2021-02-08T17:54:37
Reserved: 2021-01-22T00:00:00
Link: CVE-2021-25837
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-02-08T18:15:13.927
Modified: 2021-02-12T13:54:34.670
Link: CVE-2021-25837
JSON object: View
Redhat Information
No data.
CWE