Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/10/25 10:27 p.m.23 views

Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)

Impact A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Previously, the passed isstatic parameter was incorrect -- it was only set to true if the call comes...

7.5CVSS7.3AI score0.00244EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/10/25 10:27 p.m.20 views

GHSA-HHC4-47RH-CR34 Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)

Impact A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Previously, the passed isstatic parameter was incorrect -- it was only set to true if the call comes...

5.9CVSS6.4AI score0.00244EPSS
Exploits0References5
NVD
NVD
added 2022/10/25 7:15 p.m.7 views

CVE-2022-39354

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

7.5CVSS0.00244EPSS
Exploits0References2
Prion
Prion
added 2022/10/25 7:15 p.m.9 views

Design/Logic Flaw

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

5CVSS7.4AI score0.00244EPSS
Exploits0References2Affected Software1
RustSec
RustSec
added 2022/10/25 12:0 p.m.20 views

evm incorrect state transition

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

7.5CVSS1.6AI score0.00244EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2022/10/25 12:0 a.m.15 views

CVE-2022-39354 evm has incorrect is_static parameter for custom stateful precompiles

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the isstatic parameter to determine if the call is executed in a static context via STATICCALL, and thus decide if stateful operations should be done. Prior to version 0.36.0, th...

5.9CVSS7.7AI score0.00244EPSS
Exploits0References2
Rows per page
Query Builder