CVE-2023-44378

gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possible to construct two valid decomposition to bits. In addition to the canonical decomposition of `a`, for small values there exists a second decomposition for `a+r` (where `r` is the modulus the values are being reduced by). The second decomposition was possible due to overflowing the field where the values are defined. Upgrading to version 0.9.0 should fix the issue without needing to change the calls to value comparison methods.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f	Patch
https://github.com/Consensys/gnark/security/advisories/GHSA-498w-5j49-vqjg	Mitigation Patch Third Party Advisory
https://github.com/zkopru-network/zkopru/issues/116	Not Applicable
https://github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f	Patch
https://github.com/Consensys/gnark/security/advisories/GHSA-498w-5j49-vqjg	Mitigation Patch Third Party Advisory
https://github.com/zkopru-network/zkopru/issues/116	Not Applicable

Configurations

Configuration 1 (hide)

cpe:2.3:a:consensys:gnark:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:25

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-09 14:15

Updated : 2024-11-21 08:25

NVD link : CVE-2023-44378

Mitre link : CVE-2023-44378

CVE.ORG link : CVE-2023-44378

JSON object : View

Products Affected

consensys

gnark

CWE

CWE-191

Integer Underflow (Wrap or Wraparound)

CWE-697

Incorrect Comparison

{"id": "CVE-2023-44378", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 2.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2023-10-09T14:15:10.873", "references": [{"url": "https://github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Consensys/gnark/security/advisories/GHSA-498w-5j49-vqjg", "tags": ["Mitigation", "Patch", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/zkopru-network/zkopru/issues/116", "tags": ["Not Applicable"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/Consensys/gnark/security/advisories/GHSA-498w-5j49-vqjg", "tags": ["Mitigation", "Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/zkopru-network/zkopru/issues/116", "tags": ["Not Applicable"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-191"}, {"lang": "en", "value": "CWE-697"}]}], "descriptions": [{"lang": "en", "value": "gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possible to construct two valid decomposition to bits. In addition to the canonical decomposition of `a`, for small values there exists a second decomposition for `a+r` (where `r` is the modulus the values are being reduced by). The second decomposition was possible due to overflowing the field where the values are defined. Upgrading to version 0.9.0 should fix the issue without needing to change the calls to value comparison methods."}, {"lang": "es", "value": "gnark es una librer\u00eda zk-SNARK que ofrece una API de alto nivel para dise\u00f1ar circuitos. Antes de la versi\u00f3n 0.9.0, para algunos valores en el circuito, era posible construir dos descomposici\u00f3n v\u00e1lida en bits. Adem\u00e1s de la descomposici\u00f3n can\u00f3nica de \"a\", para valores peque\u00f1os existe una segunda descomposici\u00f3n para \"a+r\" (donde \"r\" es el m\u00f3dulo por el que se reducen los valores). La segunda descomposici\u00f3n fue posible debido al desbordamiento del campo donde se definen los valores. La actualizaci\u00f3n a la versi\u00f3n 0.9.0 deber\u00eda solucionar el problema sin necesidad de cambiar las llamadas a los m\u00e9todos de comparaci\u00f3n de valores."}], "lastModified": "2024-11-21T08:25:46.720", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:consensys:gnark:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33F1210A-A393-4C12-B0DF-0F698913487C", "versionEndExcluding": "0.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}