Lucene search
K

Design/Logic Flaw

🗓️ 18 Oct 2021 21:15:00Reported by PRIOn knowledge baseType 
prion
 prion
🔗 www.prio-n.com👁 14 Views

The `evm` crate < 0.31.0 for Ethereum Virtual Machine implements JUMPI opcode's condition check after destination validity, instead of before, posing a high severity security risk for Ethereum mainnet. Recommend immediate update to version 0.31.0 or later to mitigate risk while considering chain upgrade preparations

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-41153
19 Oct 202100:32
circl
CNNVD
evm crate 安全漏洞
18 Oct 202100:00
cnnvd
CVE
CVE-2021-41153
18 Oct 202121:00
cve
Cvelist
CVE-2021-41153 Specification non-compliance in JUMPI
18 Oct 202121:00
cvelist
EUVD
EUVD-2021-2242
7 Oct 202500:30
euvd
Github Security Blog
Specification non-compliance in JUMPI
19 Oct 202115:28
github
NVD
CVE-2021-41153
18 Oct 202121:15
nvd
OSV
GHSA-PVH2-PJ76-4M96 Specification non-compliance in JUMPI
19 Oct 202115:28
osv
RedhatCVE
CVE-2021-41153
9 Jan 202608:54
redhatcve
Snyk
Always-Incorrect Control Flow Implementation
19 Oct 202115:28
snyk
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Oct 2021 13:42Current
9.5High risk
Vulners AI Score9.5
EPSS0.00334
14