CVE-2022-36058 : Security Advisory and Response

A detailed overview of CVE-2022-36058, a vulnerability in elrond-go affecting versions <= 1.3.33.

Understanding CVE-2022-36058

This section provides insights into the nature and impact of the vulnerability.

What is CVE-2022-36058?

CVE-2022-36058 affects elrond-go versions prior to 1.3.34, allowing the occurrence of a

MultiESDTNFTTransfer

transaction with a missing function name.

The Impact of CVE-2022-36058

The vulnerability poses a high severity risk with an impact on system integrity due to improper input validation.

Technical Details of CVE-2022-36058

Explore the technical aspects of the vulnerability to understand its implications.

Vulnerability Description

The issue arises when processing blocks using elrond-go, leading to a

MultiESDTNFTTransfer

call with a missing function name.

Affected Systems and Versions

elrond-go versions <= 1.3.33 are affected by this vulnerability.

Exploitation Mechanism

The vulnerability can be exploited by malicious actors to impact system integrity without the need for special privileges.

Mitigation and Prevention

Discover how to address and prevent the CVE-2022-36058 vulnerability.

Immediate Steps to Take

Users are advised to update elrond-go to version 1.3.34 or later to mitigate the vulnerability.

Long-Term Security Practices

Implement secure coding practices and routine security assessments to prevent similar vulnerabilities in the future.

Patching and Updates

Regularly update software components and stay informed about security advisories to protect systems effectively.