Vulnerability Details : CVE-2022-31111
Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance type was incorrectly implemented. This leads to possible discrepancy between appeared EVM transfer value and actual Substrate value transferred. It is recommended that an emergency upgrade to be planned and EVM execution temporarily paused in the mean time. The issue is patched in Frontier master branch commit fed5e0a9577c10bea021721e8c2c5c378e16bf66 and polkadot-v0.9.22 branch commit e3e427fa2e5d1200a784679f8015d4774cedc934. This vulnerability affects only EVM internal states, but not Substrate balance states or node. You can temporarily pause EVM execution (by setting up a Substrate `CallFilter` that disables `pallet-evm` and `pallet-ethereum` calls before the patch can be applied.
Products affected by CVE-2022-31111
- cpe:2.3:a:parity:frontier:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-31111
0.14%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 31 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-31111
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST | |
5.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
3.9
|
1.4
|
NIST | |
5.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
3.9
|
1.4
|
GitHub, Inc. |
CWE ids for CVE-2022-31111
-
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.Assigned by: security-advisories@github.com (Primary)
References for CVE-2022-31111
-
https://github.com/paritytech/frontier/commit/e3e427fa2e5d1200a784679f8015d4774cedc934
Limit number of iterations in genesis nonce building (#753) · paritytech/frontier@e3e427f · GitHubPatch;Third Party Advisory
-
https://github.com/paritytech/frontier/commit/fed5e0a9577c10bea021721e8c2c5c378e16bf66
Limit number of iterations in genesis nonce building (#753) · paritytech/frontier@fed5e0a · GitHubPatch;Third Party Advisory
-
https://github.com/paritytech/frontier/pull/753
Fix incorrect truncation of low_u128/low_u64 by sorpaas · Pull Request #753 · paritytech/frontier · GitHubIssue Tracking;Patch;Third Party Advisory
-
https://github.com/paritytech/frontier/security/advisories/GHSA-hc8w-mx86-9fcj
Discrepency between appeared EVM transfer value and actual value due to incorrect truncation · Advisory · paritytech/frontier · GitHubPatch;Third Party Advisory
Jump to