Lucene search

[email protected]NVD:CVE-2018-12067

HistoryJun 25, 2018 - 11:29 a.m.

CVE-2018-12067

2018-06-2511:29:00

CWE-190

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

38.8%

JSON

The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the “tradeTrap” issue.

Affected configurations

Nvd

Node

substratumsubstratumMatch-

VendorProductVersionCPE
substratumsubstratum-cpe:2.3:a:substratum:substratum:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
substratum	substratum	-	cpe:2.3:a:substratum:substratum:-:::::::*

References

peckshield.com/2018/06/11/tradeTrap/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

38.8%

JSON

Related for NVD:CVE-2018-12067

cvelist1 prion1 cve1