evm-network (>=0.11.0 <=0.11.0-beta.3), evm-network-classic (>=0.11.0 <=0.11.0-beta.3) +21 more potentially affected by CVE-2021-41153 via evm (>=0.11.1 <=0.27.0)

evm CARGO version =0.11.1, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =1.0.0, =1.0.0, =2.0.0, =1.0.0, =3.0.0 and more Source cves: CVE-2021-41153 Source advisory: OSV:GHSA-PVH2-PJ76-4M96...

CVE-2021-41153

creationtimestamp| type| source ---|---|--- 2021-10-19 00:32:18+00:00| seen| https://t.me/cibsecurity/30739...

CVE-2021-41153 Specification non-compliance in JUMPI

The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In evm crate 0.31.0, JUMPI opcode's condition is checked after the destination validity check. However, according to Geth and OpenEthereum, the condition check should happen before the destination validity check. This is a...