Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2024/03/05 2:39 p.m.13 views

eth-abi is vulnerable to recursive DoS

This is related to recent ZST stuff https://github.com/ethereum/eth-abi/security/advisories/GHSA-rqr8-pxh7-cq3g, but it's a different one. Basically a recursive pointer issue py from ethabi import decode payload =...

7AI score
Exploits0References3Affected Software1
OSV
OSV
added 2024/03/05 2:39 p.m.0 views

GHSA-3QWC-47JF-5RF7 eth-abi is vulnerable to recursive DoS

This is related to recent ZST stuff https://github.com/ethereum/eth-abi/security/advisories/GHSA-rqr8-pxh7-cq3g, but it's a different one. Basically a recursive pointer issue py from ethabi import decode payload =...

5.9AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/03/05 12:0 a.m.1 views

PT-2024-40053 · Eth Abi · Eth Abi

Name of the Vulnerable Software and Affected Versions: eth-abi affected versions not specified Description: The issue is related to a recursive pointer problem. It can cause an OverflowError when decoding a specially crafted payload using the decode function from the eth abi module. The error...

7.6AI score
Exploits0References4
vulnersOsv
vulnersOsv
added 2023/11/24 4:54 p.m.1 views

0x-order-utils (>=1.0.2 <=1.1.1), 0x-web3 (>=4.7.1 <=5.0.0a5) +436 more potentially affected by unknown CVE via eth-abi (>=0.5.0 <=4.0.0b2)

eth-abi PYPI version =0.5.0, =1.0.2, =4.7.1, =0.1.3, =0.1.13, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.4.0a1, =0.1.0, =0.5.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RQR8-PXH7-CQ3G...

5.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/08/08 11:43 a.m.3 views

Malicious code in web3tool-eth-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e13be402ee9d4db3c195949098b1f824dd7c443db3326421128b4d211aa41a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/08/08 11:43 a.m.3 views

MAL-2023-1062 Malicious code in web3tool-eth-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e13be402ee9d4db3c195949098b1f824dd7c443db3326421128b4d211aa41a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder