blog.zencash.com
https://blog.zencash.com/update-for-the-equihash-mining-application-z-nomp CVE-2018-10831
HIGH
zclassic z-nomp Use of a Broken or Risky Cryptographic Algorithm
Record summary
CVE-2018-10831 has a selected CVSS score of 7.5 (high).
Description
Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by providing a solution with {x1=1,x2=1,x3=1,...,x512=1} to bypass this verifier for any blockheader. This originally affected (for example) the Bitcoin Gold and Zcash cryptocurrencies, and continued to be exploited in the wild in May 2018 against smaller cryptocurrencies.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · May 9, 2018 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
z-nompBrowse zclassic / z-nomp | VulnCheck | Version data not supplied | |
References
3github.com
https://github.com/edwardz246003/misc/blob/master/Attackers%20Fake%20Computational%20Power%20to%20Steal%20Cryptocurrencies%20from%20Mining%20Pools.md nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-10831