crates.io/pallet-evm-precompile-modexp CVE-2023-28431: high 7.5, EPSS 0.87%
Frontier's modexp precompile is slow for even modulus
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fcmm-54jp-7vf6
- https://github.com/paritytech/frontier/security/advisories/GHSA-fcmm-54jp-7vf6
- https://nvd.nist.gov/vuln/detail/CVE-2023-28431
- https://github.com/paritytech/frontier/pull/1017
- https://github.com/paritytech/frontier/commit/5af12e94d7dfc8a0208a290643a800f55de7b219
- https://github.com/polkadot-evm/frontier
- https://github.com/rust-num/num-bigint/blob/6f2b8e0fc218dbd0f49bebb8db2d1a771fe6bafa/src/biguint/power.rs#L134
CVE-2023-28431 · published · modified · JSON