babylonlabs-io/babylon · Security
Babylon's malformed vote extensions are not rejected
- GHSA ID
- GHSA-2fcv-qww3-9v6h
- Severity
- high
- Published
- Updated
- CVSS v4
- 7 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
Description
Summary
Adversarial validators can send large vote extensions by using non-existing protobuf tags. This will result in the rejection of the subsequent block proposal. Eventually, all block proposals will be rejected by all validators.
Impact
A small group of adversarial validators can cause a chain halt.
CWEs
- CWE-770 · Allocation of Resources Without Limits or Throttling