4437 matches found
CVE-2020-26241 Shallow copy bug in geth
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy at 0x00...04 contract di...
CVE-2020-26241
CVE-2020-26241 is a consensus vulnerability in the Go Ethereum (Geth) client prior to version 1.9.17. A crafted contract can trigger a mismatch between the EVM’s RETURNDATACOPY path and Geth’s execution by exploiting a shallow copy bug in the pre-compiled dataCopy contract (0x0000…04). An attacke...
CVE-2020-26242
Go Ethereum (Geth) before version 1.9.18 is vulnerable to a Denial-of-Service (crash) during block processing. The issue stems from the uint256 library behavior (buffer underflow in MULMOD when modulo is 0), which can cause a panic and network-wide node drops if exploited. A fix was released by u...
CVE-2020-26242 Denial of service in geth
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, there is a Denial-of-service crash during block processing. This is fixed in 1.9.18...
PT-2020-16368 · Ethereum · Geth
Name of the Vulnerable Software and Affected Versions: Geth versions prior to 1.9.24 Description: An ethash mining DAG generation flaw in Geth could cause miners to erroneously calculate Proof of Work in an upcoming epoch. This issue is relevant only for miners, as non-mining nodes are unaffected...
Ethereum Go-ethereum Security Breach
Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. Ethereum Go-ethereum version prior to 1.9.24 is vulnerable to a security flaw that stems from the mining of a DAG generation vulnerability could cause miners to incorrectly...
Ethereum Go-ethereum Security Breach
Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A security vulnerability exists in Go Ethereum versions prior to 1.9.18, which stems from the Ethereum protocol experiencing a denial of service crash during block processing...
Ethereum Go-ethereum Security Breach
Ethereum Go-ethereum is a codebase from the Ethereum community that implements the Ethernet protocol in the Go language. A security vulnerability exists in Ethereum Go-ethereum versions prior to 1.9.18, which can be exploited by an attacker who can deploy a contract that writes X to the EVM memor...
DhaCoin Digital Error Vulnerability
DhaCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in DhaCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
PhilCoin Digital Error Vulnerability
PhilCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PhilCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
SmartPayment Digital Error Vulnerability
SmartPayment is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SmartPayment's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
EXGROUP Number Error Vulnerability
EXGROUP is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EXGROUP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
TopscoinAdvanced Digital Error Vulnerability
TopscoinAdvanced is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of TopscoinAdvanced. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Super Cool Awesome Money Number Error Vulnerability
Super Cool Awesome Money SCAM is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SCAM's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
aman Number Error Vulnerability
aman is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in aman's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
CorelliCoin Digital Error Vulnerability
CorelliCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CorelliCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
SmartHomeCoin Digital Error Vulnerability
SmartHomeCoin is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in SmartHomeCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
ecogreenhouse Digital Error Vulnerability
ecogreenhouse is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ecogreenhouse's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
South Park Token Token Digital Error Vulnerability
South Park Token Token SPTKN is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SPTKN. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
SDR22 Digital Error Vulnerability
SDR22 is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SDR22. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...