CVE-2023-42806
Assigner: GitHub_M
Published: 2023-09-21T16:45:34.742Z
State: PUBLISHED
title: Snapshot signature not including HeadID will allow replay attacks
problemTypes: descriptions: cweId: CWE-347
description: CWE-347: Improper Verification of Cryptographic Signature
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
version: 3.1
affected: vendor: input-output-hk
product: hydra
versions: version: < 0.13.0
status: affected
descriptions: value: Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state with it. This can lead to an incorrect distribution of value (= value extraction attack; hard, but possible) or prevent the head to finalize because the value available is not consistent with the closed utxo state (= denial of service; easy). A patch is planned for version 0.13.0. As a workaround, rotate keys between heads so not to re-use keys and not result in the same multi-signature participants.
source: advisory: GHSA-gr36-mc6v-72qq
discovery: UNKNOWN