Medium severity · published Aug 19, 2022
CVE-2022-36008
Frontier is Substrate's Ethereum compatibility layer
6.5
CVSS
1.2%
EPSS
No
On KEV
Description
Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause an overflow panic. No action is needed unless you have a bridge node that needs to distinguish different reversion exit reasons and you used RPC for this. There are currently no known workarounds.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Frontier · Parity
All versions, or not specified · source: NVD
Affected product
FR
Frontier
Parity
More from Frontier
7.5
CVE-2023-45130
Frontier is Substrate's Ethereum compatibility layer
7.5
CVE-2023-28431
Frontier is an Ethereum compatibility layer for Substrate
6.5
CVE-2022-21685
Frontier is Substrate's Ethereum compatibility layer
5.3
CVE-2022-39242
Frontier is an Ethereum compatibility layer for Substrate
5.3
CVE-2022-31111
Frontier is Substrate's Ethereum compatibility layer