CVE-2018-3756 Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a tra...
HighCVSS 7.5
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes accept them as separate valid signatures.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hyperledger iroha | = 1.0-beta | No fix listed |
| hyperledger iroha | = 1.0.0-beta1 | No fix listed |
References
- github.com third-party-advisory