Lucene search

Evmos transaction execution not accounting for all state transition after interaction with precompiles

🗓️ 10 Apr 2024 22:30:04Reported by GitHub Advisory DatabaseType

Evmos vulnerability in state transition after precompile interaction. Exploit allows arbitrary token minting

Reporter	Title	Published	Views	Family All 8
Vulnrichment	CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles	19 Apr 202414:53	–	vulnrichment
Cvelist	CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles	19 Apr 202414:53	–	cvelist
NVD	CVE-2024-32644	19 Apr 202415:15	–	nvd
OSV	Evmos transaction execution not accounting for all state transition after interaction with precompiles	10 Apr 202422:04	–	osv
OSV	Evmos transaction execution not accounting for all state transition after interaction with precompiles in github.com/evmos/evmos	5 Jun 202415:10	–	osv
OSV	CVE-2024-32644	19 Apr 202415:15	–	osv
Veracode	Improper Synchronisation	22 Apr 202406:14	–	veracode
CVE	CVE-2024-32644	19 Apr 202415:15	–	cve

Vulners

Node

tharsis evmosRange≤5.0.1

tharsis evmosRange≤4.0.2

tharsis evmosRange≤3.0.3

tharsis evmosRange≤2.0.2

tharsis evmosRange≤1.1.3

evmos evmosRange≤5.0.0

evmos evmosRange≤6.0.4

evmos evmosRange≤7.0.0

evmos evmosRange≤16.0.4

Source	Link
github	www.github.com/evmos/evmos/security/advisories/GHSA-3fp5-2xwh-fxm6
github	www.github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/state_object.go
github	www.github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/statedb.go
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-32644
github	www.github.com/evmos/evmos/commit/08982b5ee726b97bc50eaf58d1914829648b6a5f
github	www.github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/statedb.go
github	www.github.com/advisories/GHSA-3fp5-2xwh-fxm6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Apr 2024 22:04Current

7.2High risk

Vulners AI Score7.2

CVSS39.1

EPSS0.0004

SSVC

CWE-662