CVE-2018-20421

N/A

Beschreibung

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht12/24/2018

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

ethereum:go_ethereum

Schwachen (CWE)

CWE-770

Referenzen

https://github.com/ethereum/go-ethereum/issues/18289(cve@mitre.org)

https://github.com/ethereum/go-ethereum/issues/18289(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.