Lucene search

CVE-2024-32644

🗓️ 19 Apr 2024 15:50:15Reported by GitHub_MType

Prior to version 17.0.0, Evmos, a PoS EVM blockchain, allows arbitrary token minting due to unsynchronized states, posing critical fund drain vulnerability

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Evmos transaction execution not accounting for all state transition after interaction with precompiles	10 Apr 202422:04	–	github
Vulnrichment	CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles	19 Apr 202414:53	–	vulnrichment
OSV	Evmos transaction execution not accounting for all state transition after interaction with precompiles in github.com/evmos/evmos	5 Jun 202415:10	–	osv
OSV	CVE-2024-32644	19 Apr 202415:15	–	osv
OSV	Evmos transaction execution not accounting for all state transition after interaction with precompiles	10 Apr 202422:04	–	osv
Veracode	Improper Synchronisation	22 Apr 202406:14	–	veracode
Cvelist	CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles	19 Apr 202414:53	–	cvelist
NVD	CVE-2024-32644	19 Apr 202415:15	–	nvd

Vulners

Vulnrichment

Node

evmos evmosRange<17.0.0

[
  {
    "vendor": "evmos",
    "product": "evmos",
    "versions": [
      {
        "version": "< 17.0.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/evmos/evmos/security/advisories/GHSA-3fp5-2xwh-fxm6
github	www.github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/statedb.go
github	www.github.com/evmos/evmos/commit/08982b5ee726b97bc50eaf58d1914829648b6a5f

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Apr 2024 15:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS39.1

EPSS0.0004

SSVC

CWE-662