CyberSecBulletin

Paritytech vulnerabilities

We track 2 vulnerabilities in Paritytech products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2023.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Paritytech vulnerabilities

  • 7.5 High severity

    frontier: Allocation of Resources Without Limits or Throttling

    CVE-2023-45130Paritytech

    Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses `storage::remove_prefix` (now renamed to `

  • 7.5 High severity

    frontier: Incorrect Calculation

    CVE-2023-28431Paritytech

    Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under the hood. In the implementation prior to pull request 1017, the cases for modulus being even and modulus being odd are treated separately. O