« Volver al listado

CVE-2023-33241

Estado: ModificadaCrítica (9.1)—

Las carteras de criptomonedas que implementan el protocolo TSS GG18 o GG20 podrían permitir a un atacante extraer una clave privada ECDSA completa mediante la inyección de una clave de Paillier maliciosa y el engaño en la prueba de rango. Según los parámetros Beta elegidos en la implementación del protocolo, el ataque podría requerir 16 firmas o más para exfiltrar por completo las particiones de clave privada de las demás partes.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Gg18 Project — Gg18Gg20 Project — Gg20

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-33241",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-33241",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-10T14:37:38.704288Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "disclosures@halborn.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.6,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 3.1
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "disclosures@halborn.com",
      "affectedData": [
        {
          "vendor": "GG TSS Implementations",
          "product": "Wallet",
          "versions": [
            {
              "status": "affected",
              "version": "18"
            },
            {
              "status": "affected",
              "version": "20"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-08-09T22:15:10.323",
  "references": [
    {
      "url": "https://eprint.iacr.org/2019/114.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://eprint.iacr.org/2020/540.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://github.com/fireblocks-labs/mpc-ecdsa-attacks-23",
      "tags": [
        "Exploit"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://github.com/fireblocks-labs/safeheron-gg20-exploit-poc",
      "tags": [
        "Exploit"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://www.fireblocks.com/blog/gg18-and-gg20-paillier-key-vulnerability-technical-report/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://eprint.iacr.org/2019/114.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://eprint.iacr.org/2020/540.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/fireblocks-labs/mpc-ecdsa-attacks-23",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/fireblocks-labs/safeheron-gg20-exploit-poc",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.fireblocks.com/blog/gg18-and-gg20-paillier-key-vulnerability-technical-report/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-74"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares."
    }
  ],
  "lastModified": "2026-06-17T06:01:23.300",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gg18_project:gg18:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB48800C-F964-43D1-B0A5-0A9E4FF0983D"
            },
            {
              "criteria": "cpe:2.3:a:gg20_project:gg20:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3EB9A9BD-F519-4A6B-A525-6252DD8407FE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "disclosures@halborn.com"
}