CVE-2018-20421

N/A

Description

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.

Details CVE

Score CVSS v3.1N/A

Publie12/24/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

ethereum:go_ethereum

Faiblesses (CWE)

CWE-770

References

https://github.com/ethereum/go-ethereum/issues/18289(cve@mitre.org)

https://github.com/ethereum/go-ethereum/issues/18289(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.