Vulnerability Details : CVE-2023-39910
The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet private keys generated from "bx seed" entropy output and steal funds. (Affected users need to move funds to a secure new cryptocurrency wallet.) NOTE: the vendor's position is that there was sufficient documentation advising against "bx seed" but others disagree. NOTE: this was exploited in the wild in June and July 2023.
Products affected by CVE-2023-39910
- Libbitcoin » Libbitcoin ExplorerVersions from including (>=) 3.0.0 and up to, including, (<=) 3.6.0cpe:2.3:a:libbitcoin:libbitcoin_explorer:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-39910
0.11%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 30 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-39910
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2023-39910
-
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.Assigned by: nvd@nist.gov (Primary)
References for CVE-2023-39910
-
https://github.com/libbitcoin/libbitcoin-explorer/blob/20eba4db9a8a3476949d6fd08a589abda7fde3e3/src/utility.cpp#L78
libbitcoin-explorer/src/utility.cpp at 20eba4db9a8a3476949d6fd08a589abda7fde3e3 · libbitcoin/libbitcoin-explorer · GitHubThird Party Advisory
-
https://github.com/libbitcoin/libbitcoin-explorer/wiki/CVE-2023-39910
CVE 2023 39910 · libbitcoin/libbitcoin-explorer Wiki · GitHub
-
https://milksad.info/disclosure.html
Milk Sad: /full write-upThird Party Advisory
-
https://github.com/libbitcoin/libbitcoin-system/blob/a1b777fc51d9c04e0c7a1dec5cc746b82a6afe64/src/crypto/pseudo_random.cpp#L66C12-L78
libbitcoin-system/src/crypto/pseudo_random.cpp at a1b777fc51d9c04e0c7a1dec5cc746b82a6afe64 · libbitcoin/libbitcoin-system · GitHubThird Party Advisory
-
https://github.com/libbitcoin/libbitcoin-explorer/blob/20eba4db9a8a3476949d6fd08a589abda7fde3e3/src/commands/seed.cpp#L44
libbitcoin-explorer/src/commands/seed.cpp at 20eba4db9a8a3476949d6fd08a589abda7fde3e3 · libbitcoin/libbitcoin-explorer · GitHubThird Party Advisory
-
https://news.ycombinator.com/item?id=37054862
Milk Sad Disclosure | Hacker NewsThird Party Advisory
Jump to