CVE-2018-20421

Go Ethereum aka geth 1.8.19 allows attackers to cause a denial of service memory consumption by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly mstore " followed by a "c0xC800000 =...

CVE-2018-20421

CVE-2018-20421 affects Go Ethereum (aka geth) version 1.8.19, where an attacker can cause a denial of service via memory consumption by rewriting the length of a dynamic array in memory and then writing to a single memory location with a large index (illustrated by using assembly { mstore } follo...

Go Ethereum Denial of Service Vulnerability (CNVD-2019-04903)

Go Ethereum aka geth is an open source implementation of the Ether protocol written in the Go language. A security vulnerability exists in Go Ethereum version 1.8.19. An attacker can exploit this vulnerability to cause a denial of service memory consumption by overwriting the length of a dynamic...

GHSA-VQGP-4JGJ-5J64 Py-EVM is vulnerable to arbitrary bytecode injection

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

Denial Of Service (DoS)

github.com/ethereum/go-ethereum is vulnerable to a denial of service DoS attack. A malicious user can pass bytecode to the application to cause a SEGV fault, crashing the application...

Py-EVM Denial of Service Vulnerability

Py-EVM is a Python-based implementation of an Ethernet virtual machine. A denial of service vulnerability exists in Py-EVM version 0.2.0-alpha.33, which can be exploited by an attacker to cause a denial of service...

Go Ethereum Denial of Service Vulnerability

Go Ethereum aka geth is an open source implementation of the Ether protocol written in the Go language. A security vulnerability exists in the cmd/evm/runner.go file in Go Ethereum version 1.8.17. An attacker can exploit the vulnerability with the help of specially crafted bytecode to cause a...

Code injection

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

CVE-2018-19184

CVE-2018-19184 affects Go Ethereum (geth) prior to or including 1.8.17, specifically in cmd/evm/runner.go. The vulnerability allows an attacker to trigger a denial-of-service (SEGV) through specially crafted bytecode, as documented in multiple sources (NVD entry for CVE-2018-19184 and SUSE/GHSA e...

PT-2018-14845 · Ethereum · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: Go Ethereum aka geth version 1.8.17 Description: The issue allows attackers to cause a denial of service SEGV via crafted bytecode. This is related to the cmd/evm/runner.go file in Go Ethereum. The estimated number of potentially affected...

Talos Vulnerability Discovery Year in Review - 2018

Introduction Cisco Talos' Vulnerability Discovery Team investigates software and operating system vulnerabilities in order to discover them before malicious threat actors. We provide this information to vendors so that they can create patches and protect their customers as soon as possible. We...

CVE-2018-17877

A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize function to prevent a malicious contract from being called, but the attacker can bypass it by writing t...

CVE-2018-17968

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by...

Code injection

A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize function to prevent a malicious contract from being called, but the attacker can bypass it by writing t...

Code injection

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by...

CVE-2018-17968

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by...

CVE-2018-17877

CVE-2018-17877 concerns a lottery Smart Contract for Greedy 599 (Ethereum). The vulnerability: the contract generates a random value that is predictable through an external contract call. The developer attempted to prevent malicious contracts with extcodesize(), but an attacker can bypass this by...