Vulnerability · Published Jan 4, 2023 · Assigned by VulDB

CVE-2021-4300ghostlander Halcyon Block Verification main.cpp AddToBlockIndex access control

Medium 6.3

In plain English

A medium-severity improper access control in Halcyon from ghostlander. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.7%top 46.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in ghostlander Halcyon and classified as critical. Affected by this vulnerability is the function CBlock::AddToBlockIndex of the file src/main.cpp of the component Block Verification. The manipulation leads to improper access controls. The attack can be launched remotely. Upgrading to version 1.1.1.0-hal is able to address this issue. The identifier of the patch is 0675b25ae9cc10b5fdc8ea3a32c642979762d45e. It is recommended to upgrade the affected component. The identifier VDB-217417 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
ghostlander	Halcyon	n/a

Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

https://vuldb.com/?id.217417 vdb-entry, technical-description
https://vuldb.com/?ctiid.217417 signature, permissions-required
https://github.com/ghostlander/Halcyon/commit/0675b25ae9cc10b5fdc8ea3a32c642979762d45e patch
https://github.com/ghostlander/Halcyon/releases/tag/v1.1.1.0-hal patch