Improper Check for Unusual or Exceptional Conditions Affecting github.com/spacemeshos/go-spacemesh package, versions <1.5.2-hotfix1
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-GOLANG-GITHUBCOMSPACEMESHOSGOSPACEMESH-6836784
- published 12 May 2024
- disclosed 10 May 2024
- credit Unknown
Introduced: 10 May 2024
CVE-2024-34360 Open this link in a new tabHow to fix?
Upgrade github.com/spacemeshos/go-spacemesh to version 1.5.2-hotfix1 or higher.
Overview
github.com/spacemeshos/go-spacemesh is a decentralized blockchain computer using a new race-free consensus protocol that doesn't involve energy-wasteful proof of work.
Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions due to the incorrect referencing of previous activation transactions (ATXs). An attacker can manipulate the reward system by referencing an earlier ATX, thereby bypassing the protocol's requirement to maintain PoST data for a full epoch.