Incorrect success value returned in vyper

🗓️ 24 Apr 2023 22:33:52Reported by GitHub Advisory DatabaseType

Incorrect success value returned in vyper. Raw_call with revert_on_failure=False and max_outsize=0 generates wrong respons

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2023-30629	25 Apr 202302:35	–	circl
CNNVD	Vyper 安全漏洞	24 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30629	24 Apr 202321:58	–	cve
Cvelist	CVE-2023-30629 Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value	24 Apr 202321:58	–	cvelist
EUVD	EUVD-2023-0263	3 Oct 202520:07	–	euvd
NVD	CVE-2023-30629	24 Apr 202322:15	–	nvd
OSV	CVE-2023-30629 Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value	24 Apr 202321:58	–	osv
OSV	GHSA-W9G2-3W7P-72G9 Incorrect success value returned in vyper	24 Apr 202322:33	–	osv
OSV	PYSEC-2023-131	24 Apr 202322:15	–	osv
Prion	Design/Logic Flaw	24 Apr 202322:15	–	prion

Vulners

Node

vyperlang vyperRange0.3.1–0.3.8pip

Source	Link
github	www.github.com/vyperlang/vyper/security/advisories/GHSA-w9g2-3w7p-72g9
github	www.github.com/vyperlang/vyper/commit/851f7a1b3aa2a36fd041e3d0ed38f9355a58c8ae
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30629
github	www.github.com/lidofinance/gate-seals/pull/5/files
docs	www.docs.vyperlang.org/en/v0.3.7/built-in-functions.html
github	www.github.com/lidofinance/gate-seals/blob/051593e74df01a4131c485b4fda52e691cd4b7d8/contracts/GateSeal.vy
github	www.github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-131.yaml
github	www.github.com/advisories/GHSA-w9g2-3w7p-72g9

19 Nov 2024 16:31Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5

EPSS0.00337

SSVC