Security Advisory

CVE-2023-34458

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-07-13 18:45:03

Last updated 2024-10-22 16:08:19

Assigner GitHub_M

State PUBLISHED

Description

mx-chain-go is the official implementation of the MultiversX blockchain protocol, written in golang. When executing a relayed transaction, if the inner transaction failed, it would have increased the inner transactions sender account nonce. This could have contributed to a limited DoS attack on a targeted account. The fix is a breaking change so a new flag `RelayedNonceFixEnableEpoch` was needed. This was a strict processing issue while validating blocks on a chain. This vulnerability has been patched in version 1.4.17.

← Browse all CVEs View on cve.org ↗