frontier vulnerabilities

2 known vulnerabilities in frontier from Paritytech. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  frontier: Allocation of Resources Without Limits or Throttling

  CVE-2023-45130Oct 13, 2023Paritytech

  Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses `storage::remove_prefix` (now renamed to `

• 7.5 High severity

  frontier: Incorrect Calculation

  CVE-2023-28431Mar 22, 2023Paritytech

  Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under the hood. In the implementation prior to pull request 1017, the cases for modulus being even and modulus being odd are treated separately. O