PatchTheCVEethermint vulnerabilities and fixes
Recent CVEs affecting ethermint, with upgrade or downgrade steps. 6 tracked.
ethermint has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2022-08-05. Highest priority: CVE-2022-35936 (score 57/100).
- CVE-2022-35936 HIGH 8.2 UPGRADE UPGRADE Ethermint is an Ethereum library
- CVE-2021-43839 HIGH 7.5 UPGRADE UPGRADE Cronos is a commercial implementation of a blockchain
- CVE-2021-25837 HIGH 7.5 UPGRADE Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module
- CVE-2021-25836 HIGH 7.5 UPGRADE Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module
- CVE-2021-25835 HIGH 7.5 UPGRADE Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM mo
- CVE-2021-25834 HIGH 7.5 UPGRADE Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module
FAQ
How do I fix ethermint vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ethermint being exploited right now?
None of the tracked ethermint CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ethermint CVE should I patch first?
CVE-2022-35936 currently ranks highest (57/100): Ethermint is an Ethereum library.