Lucene search
+L

7 matches found

OSV
OSV
•added 2022/10/25 10:27 p.m.•117 views

GHSA-HHC4-47RH-CR34 Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)

Impact A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Previously, the passed isstatic parameter was incorrect -- it was only set to true if the call comes...

5.9CVSS6.4AI score0.00584EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/10/25 10:27 p.m.•45 views

Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)

Impact A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Previously, the passed isstatic parameter was incorrect -- it was only set to true if the call comes...

7.5CVSS7.3AI score0.00584EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2022/10/25 7:15 p.m.•69 views

CVE-2022-39354

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

7.5CVSS0.00584EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/25 7:15 p.m.•39 views

Design/Logic Flaw

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

5CVSS7.4AI score0.00584EPSS
SaveExploits0References2Affected Software1
RustSec
RustSec
•added 2022/10/25 12:00 p.m.•35 views

evm incorrect state transition

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

7.5CVSS1.6AI score0.00584EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2022/10/25 12:00 a.m.•76 views

CVE-2022-39354 evm has incorrect is_static parameter for custom stateful precompiles

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

5.9CVSS7.7AI score0.00584EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/25 12:00 a.m.•2 views

CVE-2022-39354: Always-Incorrect Control Flow Implementation

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

7.5CVSS7.2AI score0.00584EPSS
SaveExploits0References3
Rows per page
Query Builder