What’s Vulnerable › Vulnerabilities

CVE-2018-3756

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-01 · updated 2026-06-17
• Weakness: CWE-347

Description

Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes accept them as separate valid signatures.

Affected products

• hyperledger Iroha: 1.0-beta, 1.0.0-beta1

References

• https://github.com/hyperledger/iroha/releases/tag/v1.0.0_beta-2
• https://github.com/hyperledger/iroha/releases/tag/v1.0.0_beta-2

Get alerted when CVE-2018-3756 or the next vulnerability affects your stack