CVE-2023-40014

CVSS V2 None CVSS V3 None
Description
OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC2771Context` along with a custom trusted forwarder may see `_msgSender` return `address(0)` in calls that originate from the forwarder with calldata shorter than 20 bytes. This combination of circumstances does not appear to be common, in particular it is not the case for `MinimalForwarder` from OpenZeppelin Contracts, or any deployed forwarder the team is aware of, given that the signer address is appended to all calls that originate from these forwarders. The problem has been patched in v4.9.3.
Overview
  • CVE ID
  • CVE-2023-40014
  • Assigner
  • security-advisories@github.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-08-10T20:15:10
  • Last Modified Date
  • 2023-08-23T13:48:41
Weakness Enumerations
CWE URL
CWE-116 http://cwe.mitre.org/data/definitions/116.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:openzeppelin:openzeppelin_contracts:*:*:*:*:*:node.js:*:* 1 OR 4.0.0 4.9.3
cpe:2.3:a:openzeppelin:openzeppelin_contracts-upgradable:*:*:*:*:*:node.js:*:* 1 OR 4.0.0 4.9.3
References
Reference URL Reference Tags
https://github.com/OpenZeppelin/openzeppelin-contracts/commit/9445f96223041abf2bf08daa56f8da50b674cbcd Patch
https://github.com/OpenZeppelin/openzeppelin-contracts/commit/e4435eed757d4309436b1e06608e97b6d6e2fdb5 Patch
https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4481 Patch Vendor Advisory
https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4484 Patch Vendor Advisory
https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.3 Release Notes
https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-g4vp-m682-qqmp Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-40014
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40014
History
Created Old Value New Value Data Type Notes
2023-09-06 03:31:34 Added to TrackCVE
2023-09-06 03:31:36 Weakness Enumeration new