tocsin

CVE-2021-43839

3 advisories.

Go/github.com/crypto-org-chain/cronos CVE-2021-43839: high 7.5, EPSS 1.36%

Drainage of FeeCollector's Block Transaction Fees in cronos

Action: Upgrade github.com/crypto-org-chain/cronos to 0.6.5 or later.

go get github.com/crypto-org-chain/cronos@v0.6.5

Affected

introducedfixedlast affected
00.6.5-

Fixed versions

0.6.5

Sources

CVE-2021-43839 · published · modified · JSON

Go/github.com/tharsis/ethermint CVE-2021-43839: high 7.5, EPSS 1.36%

Drainage of FeeCollector's Block Transaction Fees in cronos

Action: Upgrade github.com/tharsis/ethermint to 0.7.3 or later.

go get github.com/tharsis/ethermint@v0.10.0
go get github.com/tharsis/ethermint@v0.7.3

Affected

introducedfixedlast affected
0.8.00.10.0-
00.7.3-

Fixed versions

0.10.00.7.3

Sources

CVE-2021-43839 · published · modified · JSON

Go/github.com/tharsis/evmos CVE-2021-43839: high 7.5, EPSS 1.36%

Drainage of FeeCollector's Block Transaction Fees in cronos

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-0.4.2

Fixed versions

No fixed version in the source.

Sources

CVE-2021-43839 · published · modified · JSON