New Parity Update Fixes a Vulnerability Present in Some ETH Nodes

Published at: Aug. 29, 2019

Blockchain software development firm Parity released an update for its Ethereum (ETH) node software which fixes a vulnerability present in some instances.

Remote node crashing vulnerability

In a blog post published on Aug. 29, Parity announced the release of an update for its Ethereum node software fixing the Remote Procedure Call (RPC) vulnerability. Per the announcement, nodes running Parity’s software with manually enabled public-facing RPC could be remotely crashed with a specially constructed RPC call.

The team suspects that nodes with manually enabled tracing may also be vulnerable to the exploit. The author of the post points out that not all of the nodes running the company’s software are vulnerable:

“This means that primarily only public infrastructure setups are exposed. Regular users who have not changed these node setting are not impacted.”

Most nodes probably unaffected

While Parity expects most of the nodes running its software not to be affected, the company still recommends that everyone running Parity Ethereum nodes update to this latest version. The company claims to have received the bug report yesterday afternoon, from Scott Bigelow at blockchain startup Amberdata.

As Cointelegraph reported yesterday, Parity is delaying the Ethereum core devs’ planned hard fork until Sept. 6.

Tags
Related Posts
Developers of Ethereum DEX Protocol AirSwap Disclose Critical Exploit
Ethereum (ETH) decentralized exchange protocol AirSwap’s developers announced that they have discovered a critical vulnerability in the system’s new smart contract. AirSwap’s team announced its findings and a possible solution for all potentially affected users in a Medium post published on Sept. 13. A limited vulnerability Per the release, on Sept. 12 AirSwap’s development team found a vulnerability in a new smart contract, which has already been reverted to an older version in under 24 hours after the discovery. The exploit in question could have allowed an attacker to perform a swap without requiring a signature from a counterparty under …
Ethereum / Sept. 15, 2019
0x DEX Protocol Suspended Because of Vulnerability, Funds Safe
The Ethereum (ETH) smart contract of 0x (ZRX) decentralized exchange (DEX) protocol has been suspended after a vulnerability has been uncovered in its code, the project’s team announced in a Medium post published on July 13. Per the announcement, third-party security researcher samczsun warned the 0x team about the vulnerability in the exchange smart contract and, after evaluating it, the team suspended the exchange’s contract and the AssetProxy contracts. The vulnerability would have allowed an attacker to fill certain orders with invalid signatures. The announcement reassures that one has exploited this vulnerability and no users have lost their funds. The …
Ethereum / July 13, 2019
An Ethereum 2.0 Proof-of-Stake Testnet Blockchain Is Now Live
An Ethereum (ETH) 2.0 Proof-of-Stake (PoS) testnet beacon blockchain is now live. Preston Van Loon, co-founder of sharding development firm Prysmatic Labs, announced the development in a Medium post on May 7. Ethereum 2.0 is an upcoming new Ethereum chain featuring improvements in security, scalability, and decentralization. Ethereum 2.0 would not be introduced to the current Ethereum network by means of a hard fork. Instead, users will be able to transfer value from the current Proof-of-Work (PoW) chain via a one-way smart contract. The announcement also notes that shards are a core concept behind Ethereum 2.0. Shards are individual chains …
Decentralization / May 8, 2019
Crypto hacks are set to hit all-time highs in 2022, analyst explains
Reducing the amount of hacking by improving cybersecurity should be considered a top priority for the crypto industry, said Kim Grauer, director of research of blockchain intelligence firm Chainalysis. As pointed out by the firm, this year could outpace 2021 in terms of crypto stolen through hacks. The vast majority of these exploits have been targeting the field of decentralized finance. “This can't go on in the industry because people are going to lose faith in investing in DeFi platforms”, Grauer said in an interview with Cointelegraph. Unlike centralized exchanges, which have improved their resiliency to crypto hacks, decentralized protocols …
Blockchain / Oct. 19, 2022
PIVX, Possibly Other PoS Chains Vulnerable to Bug, Attackers Profit
Private transactions cryptocurrency PIVX and over 200 other blockchains are vulnerable to attackers obtaining disproportionately high staking rewards. A major staking vulnerability Cryptocurrency consulting firm Lunar Digital Assets claimed in a post published on its website on Aug. 12 that a staking vulnerability is being used across PIVX and its forks. The weakness reportedly allows the attacker to obtain mathematically impossible staking rewards on vulnerable proof-of-stake (PoS) chains. According to the post’s author, the PIVX development team claimed to have solved the issue in January. Nonetheless, a core developer of PoS altcoin BitGreen (BITG) noticed that the vulnerability in question …
Blockchain / Aug. 13, 2019