https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 02:29:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-196785 EUVD-2026-196785 https://cve.radiocsirt.org/vuln/euvd-2026-196785 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34458 <p>mx-chain-go is the official implementation of the MultiversX blockchain protocol, written in golang. When executing a relayed transaction, if the inner transaction failed, it would have increased the inner transaction&#39;s sender account nonce. This could have contributed to a limited DoS attack on a targeted account. The fix is a breaking change so a new flag `RelayedNonceFixEnableEpoch` was needed. This was a strict processing issue while validating blocks on a chain. This vulnerability has been patched in version 1.4.17.</p> <p>mx-chain-go is the official implementation of the MultiversX blockchain protocol, written in golang. When executing a relayed transaction, if the inner transaction failed, it would have increased the inner transaction&#39;s sender account nonce. This could have contributed to a limited DoS attack on a targeted account. The fix is a breaking change so a new flag `RelayedNonceFixEnableEpoch` was needed. This was a strict processing issue while validating blocks on a chain. This vulnerability has been patched in version 1.4.17.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-34458 https://cve.radiocsirt.org/vuln/ghsa-j494-7x2v-vvvp <p><strong>Affected:</strong> Go: github.com/multiversx/mx-chain-go</p> <p>### Impact When executing a relayed transaction, if the inner transaction failed, it would have increased the inner transaction&#39;s sender account nonce. This could have contributed to a limited DoS attack on a targeted account. The fix is a breaking change so a new flag `RelayedNonceFixEnableEpoch` was needed. This was a strict processing issue while validating blocks on a chain.</p> <p>### Patches v1.4.17 and later versions contain the fix for this issue</p> <p>### Workarounds there were no workarounds for this issue. The affected account could only wait for the DoS attack to finish as the attack was not free or to attempt to send transactions in a very fast manner so as to compete on the same nonce with the attacker.</p> <p>### References For the future understanding of this issue, on v1.4.17 and onwards versions, we have this integration test that addresses the issue and tests the fix. https://github.com/multiversx/mx-chain-go/blob/babdb144f1316ab6176bf3dbd7d4621120414d43/integrationTests/vm/txsFee/relayedMoveBalance_test.go#LL165C14-L165C14</p> <p><strong>Affected:</strong> Go: github.com/multiversx/mx-chain-go</p> <p>### Impact When executing a relayed transaction, if the inner transaction failed, it would have increased the inner transaction&#39;s sender account nonce. This could have contributed to a limited DoS attack on a targeted account. The fix is a breaking change so a new flag `RelayedNonceFixEnableEpoch` was needed. This was a strict processing issue while validating blocks on a chain.</p> <p>### Patches v1.4.17 and later versions contain the fix for this issue</p> <p>### Workarounds there were no workarounds for this issue. The affected account could only wait for the DoS attack to finish as the attack was not free or to attempt to send transactions in a very fast manner so as to compete on the same nonce with the attacker.</p> <p>### References For the future understanding of this issue, on v1.4.17 and onwards versions, we have this integration test that addresses the issue and tests the fix. https://github.com/multiversx/mx-chain-go/blob/babdb144f1316ab6176bf3dbd7d4621120414d43/integrationTests/vm/txsFee/relayedMoveBalance_test.go#LL165C14-L165C14</p> https://cve.radiocsirt.org/vuln/ghsa-j494-7x2v-vvvp https://cve.radiocsirt.org/vuln/gsd-2023-34458 gsd-2023-34458 https://cve.radiocsirt.org/vuln/gsd-2023-34458