CVE-2018-10831 Other in n/a
Attackers can spoof mining shares by bypassing the Equihash solution verifier, allowing them to claim rewards without valid work.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-10831?
CVE-2018-10831 is a high-severity vulnerability in n/a, published on 9 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by providing a solution with {x1=1,x2=1,x3=1,...,x512=1} to bypass this verifier for any blockheader. This originally affected (for example) the Bitcoin Gold and Zcash cryptocurrencies, and continued to be exploited in the wild in May 2018 against smaller cryptocurrencies.
Weakness: CWE-327
Which versions are affected by CVE-2018-10831?
It affects 1 product.
Products include Zclassic Z-Nomp.
How do I fix CVE-2018-10831?
No fix has been published for CVE-2018-10831 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-10831 being exploited?
There is no known exploitation of CVE-2018-10831 in the wild and no public exploit code.
Sources
Also known as GHSA-frpv-4f5w-hf37.