PYSEC-2023-142

🗓️ 07 Aug 2023 19:00:15Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Vyer smart contract language on EVM has re-entrancy lock allocation issue in versions 0.2.15, 0.2.16, 0.3.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Github Security Blog	Vyper has incorrectly allocated named re-entrancy locks	9 Aug 202314:27	–	github
Veracode	Incorrect Re-Entrancy Lock Allocation	9 Aug 202301:28	–	veracode
Prion	Xxe	7 Aug 202319:15	–	prion
CVE	CVE-2023-39363	7 Aug 202319:15	–	cve
OSV	GHSA-5824-CM3X-3C38 Vyper has incorrectly allocated named re-entrancy locks	9 Aug 202314:27	–	osv
OSV	CVE-2023-39363	7 Aug 202319:15	–	osv
NVD	CVE-2023-39363	7 Aug 202319:15	–	nvd
Vulnrichment	CVE-2023-39363 Vyper incorrectly allocated named re-entrancy locks	7 Aug 202318:40	–	vulnrichment
Cvelist	CVE-2023-39363 Vyper incorrectly allocated named re-entrancy locks	7 Aug 202318:40	–	cvelist

Source	Link
github	www.github.com/vyperlang/vyper/security/advisories/GHSA-5824-cm3x-3c38
hackmd	www.hackmd.io/@LlamaRisk/BJzSKHNjn
hackmd	www.hackmd.io/@vyperlang/HJUgNMhs2
github	www.github.com/vyperlang/vyper/pull/2514
github	www.github.com/vyperlang/vyper/pull/2439

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Aug 2023 19:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS35.9

CVSS49.1

EPSS0.00072

SSVC