Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseGHSA-555p-m4v6-cqxv
GHSA-555p-m4v6-cqxv:
vulnerability analysis and mitigation
Overview
A security vulnerability (GHSA-555p-m4v6-cqxv) was identified in CometBFT affecting all versions up to 0.38.5. The issue was discovered on February 15, 2024, and publicly disclosed on February 28, 2024. This vulnerability relates to default configuration parameters in the evidence handling mechanism that could potentially impact validators and chain builders/maintainers (GitHub Advisory).
Technical details
The vulnerability stems from insufficient default values for EvidenceParams.MaxAgeNumBlocks and EvidenceParams.MaxAgeDuration consensus parameters. These parameters may not provide adequate coverage for the entire unbonding period of a chain (Staking.UnbondingTime). The issue has been classified as Low severity and is associated with CWE-1188 (GitHub Advisory).
Impact
If the conditions of both EvidenceParams.MaxAgeNumBlocks and EvidenceParams.MaxAgeDuration parameters are exceeded, evidence may be prematurely expired and considered no longer valid. This could potentially allow Byzantine behavior to go unpunished if evidence is discovered outside the configured window (GitHub Advisory).
Mitigation and workarounds
Chain ecosystems and maintainers are recommended to adjust their consensus parameters appropriately. Specifically, EvidenceParams.MaxAgeDuration should be set to exceed the chain's unbonding period, and EvidenceParams.MaxAgeNumBlocks should exceed the estimated number of blocks produced during the unbonding period. Regular evaluation of consensus parameters is recommended as networks mature (GitHub Advisory).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management