PYSEC-2018-96

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

PYSEC-2018-155

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

PYSEC-2018-96

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

Design/Logic Flaw

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

CVE-2018-18920

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

PYSEC-2018-155

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

eth-pm (0.1.0a23), eth-tester-rpc (>=0.1.0b1, <=0.2.0b1) +7 more potentially affected by CVE-2018-18920 via py-evm (>=0.2.0a16, <=0.2.0a32)

py-evm PYPI version =0.2.0a16, =0.1.0b1, =0.1.0a18, =0.1.2a2, =0.10.0, =0.0.1a3, =0.1.0a12, =0.1.2b2, =0.1.2b3 Source cves: CVE-2018-18920 Source advisory: OSV:PYSEC-2018-96...

CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

CVE-2018-18920

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

CVE-2018-18920

CVE-2018-18920 concerns Py-EVM v0.2.0-alpha.33, where a crafted vm.execute_bytecode call can manipulate computation._stack.values (e.g., "stack": [100, 100, 0]) in a way that expects a certain byte (b'\x') and results in an invalid opcode, causing execution failure. The description ties this to a...

CVE-2018-19184

CVE-2018-19184 affects Go Ethereum (geth) prior to or including 1.8.17, specifically in cmd/evm/runner.go. The vulnerability allows an attacker to trigger a denial-of-service (SEGV) through specially crafted bytecode, as documented in multiple sources (NVD entry for CVE-2018-19184 and SUSE/GHSA e...

CVE-2018-18920

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

CVE-2018-18920: Improper Restriction of Operations within the Bounds of a Memory Buffer

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

PT-2018-14720

Name of the Vulnerable Software and Affected Versions Py-EVM version 0.2.0-alpha.33 Description The issue allows attackers to make a vm.execute bytecode call that triggers computation with a stack containing values like 100, 100, 0 where a specific byte b'x' was expected, resulting in an executio...

PT-2018-14845

Name of the Vulnerable Software and Affected Versions Go Ethereum aka geth version 1.8.17 Description The issue allows attackers to cause a denial of service SEGV via crafted bytecode. This is related to the cmd/evm/runner.go file in Go Ethereum. The estimated number of potentially affected devic...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ManageIQ Enterprise Virtualization Manager EVM allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

CVE-2013-0185

Cross-site request forgery CSRF vulnerability in ManageIQ Enterprise Virtualization Manager EVM allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

CVE-2013-0185

Cross-site request forgery CSRF vulnerability in ManageIQ Enterprise Virtualization Manager EVM allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

CVE-2013-0185

CVE-2013-0185 refers to a cross-site request forgery in Red Hat ManageIQ Enterprise Virtualization Manager (EVM) . The connected CNVD entry confirms a CSRF vulnerability that could allow a remote attacker to hijack user authentication for requests, with the impact described as unspecified and the...

CVE-2013-0185: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in ManageIQ Enterprise Virtualization Manager EVM allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...