GHSA-W9G2-3W7P-72G9 Incorrect success value returned in vyper

🗓️ 24 Apr 2023 22:33:52Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Vyper raw_call with revert_on_failure False and max_outsize 0 may return incorrect success. Patched.

Reporter	Title	Published	Views	Family All 17
circl	CVE-2023-30629	25 Apr 202302:35	–	circl
cnnvd	Vyper 安全漏洞	24 Apr 202300:00	–	cnnvd
cve	CVE-2023-30629	24 Apr 202321:58	–	cve
cvelist	CVE-2023-30629 Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value	24 Apr 202321:58	–	cvelist
euvd	EUVD-2023-0263	3 Oct 202520:07	–	euvd
github	Incorrect success value returned in vyper	24 Apr 202322:33	–	github
nvd	CVE-2023-30629	24 Apr 202322:15	–	nvd
osv	CVE-2023-30629 Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value	24 Apr 202321:58	–	osv
osv	PYSEC-2023-131	24 Apr 202322:15	–	osv
prion	Design/Logic Flaw	24 Apr 202322:15	–	prion

Source	Link
github	www.github.com/vyperlang/vyper/security/advisories/GHSA-w9g2-3w7p-72g9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30629
github	www.github.com/lidofinance/gate-seals/pull/5/files
github	www.github.com/vyperlang/vyper/commit/851f7a1b3aa2a36fd041e3d0ed38f9355a58c8ae
docs	www.docs.vyperlang.org/en/v0.3.7/built-in-functions.html
github	www.github.com/lidofinance/gate-seals/blob/051593e74df01a4131c485b4fda52e691cd4b7d8/contracts/GateSeal.vy
github	www.github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-131.yaml
github	www.github.com/vyperlang/vyper

19 Nov 2024 16:49Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 48.7

EPSS0.00883