4435 matches found
CVE-2023-36980
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold...
CVE-2023-36980
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold...
CVE-2023-36980
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold...
Design/Logic Flaw
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold...
MAL-2023-8072 Malicious code in ethereum-cryptograph (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6e86c7c831c832fa4741a6ff20a38170abcd90a447a4a1902e53f4bdf06ae96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ethereum-cryptograph (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6e86c7c831c832fa4741a6ff20a38170abcd90a447a4a1902e53f4bdf06ae96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Memory Exhaustion
go-ethereum is vulnerable to a memory consumption. The vulnerability is due to a node which can be made to consume unbounded amounts of memory when handling a malicious crafted p2p messages sent from an attacker node. The attacker could use this issue to cause memory exhaustion leading to Denial ...
CVE-2023-36980
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold...
CVE-2023-36980
The CVE-2023-36980 entry concerns Ethereum Blockchain v0.1.1+commit.6ff4cd6, where an integer overflow can cause the balance to be zeroed when betsize + casino.balance exceeds a threshold. The issue is repeatedly described across sources (NVD, Red Hat, PRION, CNNVD, CVE listing, etc.) with common...
Ethereum Blockchain Security Breach
Ethereum Blockchain is a decentralized open source public blockchain platform with smart contract capabilities from the Ethereum Foundation. A security vulnerability exists in Ethereum Blockchain version v0.1.1+commit.6ff4cd6, which stems from the presence of an integer overflow vulnerability tha...
Unchecked return value of low level call()/delegatecall()
Lines of code Vulnerability details The vulnerability related to an "Unchecked return value of low-level call/delegatecall" is a common and critical issue in Ethereum smart contracts. Let's break down this vulnerability and discuss its implications: 1. Low-Level Calls in Solidity: In Solidity,...
PT-2023-25761 · Unknown · Ethereum Blockchain
Name of the Vulnerable Software and Affected Versions: Ethereum Blockchain version 0.1.1+commit.6ff4cd6 Description: An issue in the Ethereum Blockchain causes the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold. Recommendations: For Ethereum Blockchain...
CVE-2023-36980
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold...
abi.encode() function does not support dynamic arrays in Solidity version 0.8.16 or earlier.
Lines of code Vulnerability details Description The bug is in the burnAndCallAxelar function. The function uses the abi.encode function to encode the payload to send to the AxelarGateway contract. However, the abi.encode function was changed in Solidity version 0.8.17 to remove the support for...
GHSA-PPJG-V974-84CM Go-Ethereum vulnerable to denial of service via malicious p2p message
Impact A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. Details The p2p handler spawned a new goroutine to respond to ping requests. By flooding a node with ping requests, an unbounded number of goroutin...
Go-Ethereum vulnerable to denial of service via malicious p2p message
Impact A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. Details The p2p handler spawned a new goroutine to respond to ping requests. By flooding a node with ping requests, an unbounded number of goroutin...
CVE-2023-40591
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
Design/Logic Flaw
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...