High severity · published Dec 21, 2021
CVE-2021-43839
Drainage of FeeCollector's Block Transaction Fees
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has been patched in Cronos v0.6.5. There are no tested workarounds. All validator node operators are recommended to upgrade to Cronos v0.6.5 at their earliest possible convenience.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
cronos · crypto-org-chain
< 0.6.5 · source: vendor, NVD
ET
Ethermint · Crypto
before 0.7.3; 0.8.0 through 0.9.0 · source: NVD
EV
Evmos · Crypto
through 0.4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-43839
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-43839
Patch
https://github.com/crypto-org-chain/cronos/commit/150ef237b37ac28c8136e1c0f494932860b9ebe8
Patch
https://github.com/crypto-org-chain/cronos/pull/270
Third Party Advisory
https://github.com/crypto-org-chain/cronos/security/advisories/GHSA-f854-hpxv-cw9r