Lucene search

CVE-2023-30629 Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value

🗓️ 24 Apr 2023 21:00:58Reported by GitHub_MType

Vyper raw_call vulnerability with max_outsize=0 and revert_on_failure=Fals

Reporter	Title	Published	Views	Family All 8
Veracode	Denial Of Service (DoS)	3 May 202307:06	–	veracode
CVE	CVE-2023-30629	24 Apr 202322:15	–	cve
NVD	CVE-2023-30629	24 Apr 202322:15	–	nvd
OSV	PYSEC-2023-131	24 Apr 202322:15	–	osv
OSV	CVE-2023-30629	24 Apr 202322:15	–	osv
OSV	Incorrect success value returned in vyper	24 Apr 202322:33	–	osv
Prion	Design/Logic Flaw	24 Apr 202322:15	–	prion
Github Security Blog	Incorrect success value returned in vyper	24 Apr 202322:33	–	github

[
  {
    "vendor": "vyperlang",
    "product": "vyper",
    "versions": [
      {
        "version": ">= 0.3.1, <= 0.3.7",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/vyperlang/vyper/commit/851f7a1b3aa2a36fd041e3d0ed38f9355a58c8ae
github	www.github.com/vyperlang/vyper/security/advisories/GHSA-w9g2-3w7p-72g9
github	www.github.com/lidofinance/gate-seals/pull/5/files
github	www.github.com/lidofinance/gate-seals/blob/051593e74df01a4131c485b4fda52e691cd4b7d8/contracts/GateSeal.vy
docs	www.docs.vyperlang.org/en/v0.3.7/built-in-functions.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Apr 2023 21:58Current

7.7High risk

Vulners AI Score7.7

CVSS37.5

EPSS0.001

CWE-670