GHSA-2gw2-qgjg-xh6p: Namada-apps allows Post-Genesis Validator Bypass
Impact Ledger crash. A user is able to initialize a post-genesis validator with a negative commission rate using the --force flag. If this validator gets into the consensus set, then when computing PoS inflation inside fn updaterewardsproductsandmintinflation, an instance of mulfloor will cause the return of an Err, which causes finalizeblock to error. Patches This issue has been patched in apps version 1.1.0.
Published Feb 20, 2025
Affected packages
namada-apps
- Ecosystem
- Rust (crates.io)
- Affected
- = 1.0.0
- Fixed in
- 1.1.0
- Check
cargo tree -i namada-apps
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Impact
Ledger crash. A user is able to initialize a post-genesis validator with a negative commission rate using the --force flag. If this validator gets into the consensus set, then when computing PoS inflation inside fn update_rewards_products_and_mint_inflation, an instance of mul_floor will cause the return of an Err, which causes finalize_block to error.
Patches
This issue has been patched in apps version 1.1.0. The PoS validity predicate now enforces that the commission rate is not negative and any transaction that fails the check will be rejected, both for newly initialized validators and for commission rate change of an existing validator.
Workarounds
There are no workarounds and users are advised to upgrade.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology