CVE-2023-42806

Description

Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid} allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state wit" /> allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state wit" /> allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state wit" /> allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state wit" /> allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state wit" /> allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state wit","inLanguage":"en-US","identifier":"CVE-2023-42806","datePublished":"2023-09-21T17:15:23.583","dateModified":"2026-06-17T06:24:33.260","about":{"@type":"Thing","name":"CVE-2023-42806","identifier":"CVE-2023-42806"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2023 42806","item":"https://gotrooted.org/cve/CVE-2023-42806"}]}]} allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or contest the state with it. This can lead to an incorrect distribution of value (= value extraction attack; hard, but possible) or prevent the head to finalize because the value available is not consistent with the closed utxo state (= denial of service; easy). A patch is planned for version 0.13.0. As a workaround, rotate keys between heads so not to re-use keys and not result in the same multi-signature participants.

Weakness classification

• security-advisories@github.com: CWE-347

Primary references

• security-advisories@github.com — Product
• security-advisories@github.com — Product
• security-advisories@github.com — Product
• security-advisories@github.com — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Product
• af854a3a-2127-422b-91ae-364da2661108 — Product
• af854a3a-2127-422b-91ae-364da2661108 — Product
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory