CVE-2023-42374

An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denial of service via a crafted compressed…

Critical · published February 13, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

🚨 A single crafted compressed script is all it takes for a remote attacker to execute arbitrary code on the Sui Blockchain before version 1.6.3! 🔥 Think of it like a hotel staff member who can unlock any room just by presenting a cleverly forged key card. If they access the wrong room, they might cause chaos for all the guests! This vulnerability could lead to a complete denial of service, leaving your Sui node incapacitated and your blockchain transactions halted. Essentially, an attacker could stroll in and potentially wreak havoc on your entire operations, making it an absolute nightmare for users.

Put simply

Think of it like a hotel staff member who can unlock any room just by presenting a cleverly forged key card. If they access the wrong room, they might cause chaos for all the guests! The vulnerability allows attackers to execute arbitrary code on the Sui node component by sending a specially crafted compressed script, effectively bypassing security measures and crashing the service.

What to do

This vulnerability could lead to a complete denial of service, leaving your Sui node incapacitated and your blockchain transactions halted. Essentially, an attacker could stroll in and potentially wreak havoc on your entire operations, making it an absolute nightmare for users. To safeguard your Sui Blockchain, immediately upgrade to version 1.6.3 or later. It's crucial to patch this vulnerability before it becomes a playground for malicious actors. Don't forget to review your security protocols to prevent similar issues in the future! You've got this! Stay ahead of the game and secure your systems like the security superhero you are! 🦸

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01337 · 71.0th percentile
Published
2024-02-13T00:00Z
EPSS history
Timeline
  • 13 FEB 00:00Z
    An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denial of service via a crafted compressed…
    cvelistv5