NRDAX-T0367 - Vote Extension Validation Panic

consensus · active · first seen 2024-01-01

provenance: Catalogued from public disclosure; not yet reproduced

mechanism

Vote Extension Validation Panic

instances (0)

chain	primitive	fidelity	origin	reproducer (bundle)	source

references

cve: CVE-2024-45310

vendor-advisory: GHPR-cometbft-cometbft-5890

vendor-advisory: GHPR-cosmos-gaia-3270

related (consensus)

NRDAX-T0010 - Block Processing Use-After-Free Crash active NRDAX-T0011 - Block Replay Race Crash active NRDAX-T0012 - Block Timestamp Validation Bypass active NRDAX-T0020 - Checkpoint Snapshot Signer Bypass active NRDAX-T0031 - Consensus Deadlock Vote Race active NRDAX-T0033 - Consensus Message Crash DoS active NRDAX-T0057 - Duplicate Proof Memory Leak DoS active NRDAX-T0065 - Engine API Deadlock active

cite

https://nrdax.com/techniques/NRDAX-T0367

plain

NRDAX Registry. Technique NRDAX-T0367.

bibtex

@misc{nrdax_NRDAX_T0367,
  title = {Vote Extension Validation Panic (NRDAX-T0367)},
  howpublished = {NRDAX Registry},
  url = {https://nrdax.com/techniques/NRDAX-T0367},
}

json (csl)

{
  "id": "nrdax-NRDAX-T0367",
  "type": "dataset",
  "title": "Vote Extension Validation Panic (NRDAX-T0367)",
  "URL": "https://nrdax.com/techniques/NRDAX-T0367",
  "publisher": "NRDAX Registry"
}