CVE-2018-20421

N/A

Descripcion

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado12/24/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

ethereum:go_ethereum

Debilidades (CWE)

CWE-770

Referencias

https://github.com/ethereum/go-ethereum/issues/18289(cve@mitre.org)

https://github.com/ethereum/go-ethereum/issues/18289(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.