CVE-2023-26557 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic

What is CVE-2023-26557?

CVE-2023-26557 is a high-severity vulnerability in n/a, published on 21 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)

Weakness: CWE-203

Which versions are affected by CVE-2023-26557?

6 open source packages ship an affected version, including github.com/binance-chain/tss-lib and github.com/bnb-chain/tss-lib. It affects 1 product.

Products include Iofinnet Tss-Lib.

How do I fix CVE-2023-26557?

Upgrade github.com/binance-chain/tss-lib to 1.3.6-0.20230324145555-bb6fb30bd3eb or later.

Is CVE-2023-26557 being exploited?

There is no known exploitation of CVE-2023-26557 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-26556 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar multiplication Critical 9.1
• CVE-2022-47930 IO FinNet tss-lib vulnerable to replay attacks involving proofs Medium 6.8
• CVE-2022-47931 Collision of hash values in github.com/bnb-chain/tss-lib Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-mjqv-xhgm-gx8c, GO-2023-1733.