Skip to content
Heist/ feed
Back to feed
Critical

Security advisory

Type: advisorySources: OSVCVE: CVE-2021-4300

A vulnerability has been found in ghostlander Halcyon and classified as critical. Affected by this vulnerability is the function CBlock::AddToBlockIndex of the file src/main.cpp of the component Block Verification. The manipulation leads to improper access controls. The attack can be launched remotely. Upgrading to version 1.1.1.0-hal is able to address this issue. The identifier of the patch is 0675b25ae9cc10b5fdc8ea3a32c642979762d45e. It is recommended to upgrade the affected component. The identifier VDB-217417 was assigned to this vulnerability.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2021-4300
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 12:53 UTC · Revision 1

Source evidence

CVE-2021-4300

core-osv · Original source

Published 4 Jan 2023, 22:15 UTC

A vulnerability has been found in ghostlander Halcyon and classified as critical. Affected by this vulnerability is the function CBlock::AddToBlockIndex of the file src/main.cpp of the component Block Verification. The manipulation leads to improper access controls. The attack can be launched remotely. Upgrading to version 1.1.1.0-hal is able to address this issue. The identifier of the patch is 0675b25ae9cc10b5fdc8ea3a32c642979762d45e. It is recommended to upgrade the affected component. The identifier VDB-217417 was assigned to this vulnerability.

osv:CVE-2021-4300
Complete source record
{
  "id": "f7239eec60ac47e26088025065be61411c0e0e1630fe07b2fdd900075299cad9",
  "url": "https://osv.dev/vulnerability/CVE-2021-4300",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2021-4300",
    "summary": "A vulnerability has been found in ghostlander Halcyon and classified as critical. Affected by this vulnerability is the function CBlock::AddToBlockIndex of the file src/main.cpp of the component Block Verification. The manipulation leads to improper access controls. The attack can be launched remotely. Upgrading to version 1.1.1.0-hal is able to address this issue. The identifier of the patch is 0675b25ae9cc10b5fdc8ea3a32c642979762d45e. It is recommended to upgrade the affected component. The identifier VDB-217417 was assigned to this vulnerability.",
    "evidence": "osv:CVE-2021-4300",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2021-4300",
      "aliases": [
        "CVE-2021-4300"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/ghostlander/halcyon",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "ed39a503c84d9608d0f301f12ae128f36c4faf38"
                },
                {
                  "fixed": "0675b25ae9cc10b5fdc8ea3a32c642979762d45e"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:halcyon_project:halcyon:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "1.1.1.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "range": [
                      {
                        "fixed": "0675b25ae9cc10b5fdc8ea3a32c642979762d45e"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  },
                  {
                    "range": [
                      {
                        "fixed": "ed39a503c84d9608d0f301f12ae128f36c4faf38"
                      }
                    ],
                    "source": "REFERENCES_TAG",
                    "original_tag": "v1.1.1.0-hal"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v1.1.0.3-hal",
            "v1.1.0.2-hal",
            "v1.1.0.1-hal",
            "v1.1.0.0-hal"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4300.json",
            "vanir_signatures": [
              {
                "id": "CVE-2021-4300-c1935fa3",
                "digest": {
                  "length": 2940,
                  "function_hash": "10305248216024656084912338977232963110"
                },
                "source": "https://github.com/ghostlander/halcyon/commit/0675b25ae9cc10b5fdc8ea3a32c642979762d45e",
                "target": {
                  "file": "src/main.cpp",
                  "function": "CBlock::CheckBlock"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2021-4300-c40e6802",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "105355511900724386530181311696563767876",
                    "269402346052448994325041188111138389157",
                    "309460302393590256566086224470897904031",
                    "230116994094110080314317628614218126604",
                    "276826980275533762924066868480772846694",
                    "98543386248935302488754600721159916577",
                    "287758536505900560444298499842733742026",
                    "311147851611641751698846828549482860550",
                    "284908018889021951316895529834250969422",
                    "62401294572304355820185300454867920975",
                    "122535623190981126376093543514470620962",
                    "104241435607975237020381975562207888764",
                    "174882452581893492705787870648806259108",
                    "278182712261701462478699443981443333452",
                    "74795623710365316666848520038722447926",
                    "95810954626867192821845781116982777205",
                    "184047123222678067942587501639909895204",
                    "127599239359550807544091793257356758189",
                    "78523805818798612704265286547567952399",
                    "80379672143717063287650162974945346929",
                    "93772305838583647473965125620256691828",
                    "94059201929041676340436963391723831613",
                    "282274884842151607671657621220049004194",
                    "58310343209319890363302639893853656158",
                    "320444084641697696576935459030831457211",
                    "116215755057023781153784689046981206461",
                    "137352023725335996649038982297868078275",
                    "283876739839686851178925081232490303776",
                    "227835412256598348415626178544836038418",
                    "178674064702455874137163593537777265956",
                    "294594937731353267025049352776862019873",
                    "120241644017525521818705461085648474671"
                  ]
                },
                "source": "https://github.com/ghostlander/halcyon/commit/0675b25ae9cc10b5fdc8ea3a32c642979762d45e",
                "target": {
                  "file": "src/main.cpp"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              }
            ],
            "vanir_signatures_modified": "2026-10-20T14:28:26Z"
          }
        }
      ],
      "modified": "2026-10-20T14:28:26.035158872Z",
      "provider": "osv",
      "references": [
        "https://github.com/ghostlander/Halcyon/releases/tag/v1.1.1.0-hal",
        "https://vuldb.com/?ctiid.217417",
        "https://vuldb.com/?id.217417",
        "https://github.com/ghostlander/Halcyon/commit/0675b25ae9cc10b5fdc8ea3a32c642979762d45e"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2021-4300",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 389062,
  "published_at": "2023-01-04T22:15:08.903+00:00"
}