Lucene search

MitreCVE-2018-14002

HistoryJul 12, 2018 - 3:29 p.m.

CVE-2018-14002

2018-07-1215:29:00

CWE-190

mitre

web.nvd.nist.gov

cve-2018-14002

integer overflow

mp3 coin

ethereum token

smart contract

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

47.1%

JSON

An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to set any user’s balance.

Affected configurations

Nvd

Node

mp3_coin_projectmp3_coinMatch-

VendorProductVersionCPE
mp3_coin_projectmp3_coin-cpe:2.3:a:mp3_coin_project:mp3_coin:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mp3_coin_project	mp3_coin	-	cpe:2.3:a:mp3_coin_project:mp3_coin:-:::::::*

References

github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md

github.com/VenusADLab/EtherTokens/tree/master/MP3%20Coin%28MP3%29

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

47.1%

JSON

Related for CVE-2018-14002