Miggo Logo
Miggo Vulnerability Database
→
GHSA-qr8r-m495-7hc4

GHSA-qr8r-m495-7hc4: Validation of `VoteExtensionsEnableHeight` can cause chain halt in Go package github.com/cometbft/cometbft

N/A

CVSS Score

Basic Information

CVE ID
-
GHSA ID
GHSA-qr8r-m495-7hc4
EPSS Score
-
CWE
-
Published
1/19/2024
Updated
1/19/2024
KEV Status
No
Technology
TechnologyGo

Technical Details

CVSS Vector
-
Package NameEcosystemVulnerable VersionsFirst Patched Version
github.com/cometbft/cometbftgo>= 0.38.0, < 0.38.30.38.3

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from improper validation in the ValidateUpdate method of ConsensusParams. The commit diff shows significant changes to this function's validation logic, adding multiple conditional checks (cases 1-9 in comments) that were missing in vulnerable versions. The original implementation failed to properly handle scenarios like disabling already-activated vote extensions or setting enable heights in the past, which the patched version explicitly addresses. The associated test file (types/params_test.go) was also substantially expanded to cover these failure scenarios, confirming the function's central role in the vulnerability.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

## Summ*ry * vuln*r**ility in *om*t**T’s v*li**tion lo*i* *or `Vot**xt*nsions*n**l***i**t` **n r*sult in * ***in **lt w**n tri***r** t*rou** * *ov*rn*n** p*r*m*t*r ***n** propos*l on *n ***I* *ppli**tion ***in. I* * p*r*m*t*r ***n** propos*l in*lu*i

Reasoning

T** vuln*r**ility st*ms *rom improp*r `v*li**tion` in t** `V*li**t*Up**t*` m*t*o* o* `*ons*nsusP*r*ms`. T** *ommit *i** s*ows si*ni*i**nt ***n**s to t*is *un*tion's `v*li**tion` lo*i*, ***in* multipl* *on*ition*l ****ks (**s*s *-* in *omm*nts) t**t w