CVE-2017-14457

🗓️ 19 Jan 2018 23:00:00Reported by talosType

cve🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

An exploitable info leak/denial of service vuln in libevm opcode handler of CPP-Ethereum

Reporter	Title	Published	Views	Family All 9
CNVD	CPP-Ethereum libevm Information Disclosure Vulnerability	10 Jan 201800:00	–	cnvd
Cvelist	CVE-2017-14457	19 Jan 201823:00	–	cvelist
EUVD	EUVD-2017-5960	7 Oct 202500:30	–	euvd
NVD	CVE-2017-14457	19 Jan 201823:29	–	nvd
Prion	Out-of-bounds	19 Jan 201823:29	–	prion
Positive Technologies	PT-2018-5654 · Ethereum · Cpp-Ethereum	19 Jan 201800:00	–	ptsecurity
seebug.org	CPP-Ethereum libevm create2 Information Leak Vulnerability(CVE-2017-14457)	10 Jan 201800:00	–	seebug
Talos	CPP-Ethereum libevm create2 Information Leak Vulnerability	9 Jan 201800:00	–	talos
Talos Blog	Vulnerability Spotlight: Multiple Vulnerabilities in the CPP and Parity Ethereum Client	9 Jan 201808:12	–	talosblog

NVD

Vulners

Node

ethereum ethereum_virtual_machineMatch-

[
  {
    "product": "CPP-Ethereum",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0503
securityfocus	www.securityfocus.com/bid/102475

Parameter	Position	Path	Description	CWE
initSize	path	cpp-ethereum/libevm/VMCalls.cpp	Unscaled initSize input used to construct bytesConstRef for CREATE2, enabling out-of-bounds read via unsafe memory reference	CWE-125

21 Nov 2024 03:12Current

7.9High risk

Vulners AI Score7.9

CVSS 26.4

CVSS 3.18.2

CVSS 38.2

EPSS0.00286

CWE-125