YieldSourcePrizePool_canAwardExternal does not work

Handle cmichel Vulnerability details The idea of YieldSourcePrizePoolcanAwardExternal seems to be to disallow awarding the interest-bearing token of the yield source, like aTokens, cTokens, yTokens. "@dev Different yield sources will hold the deposits as another kind of token: such a Compound's...

Loans of tokens with >18 decimals can result in incorrect collateral calculation

Handle 0xsomeone Vulnerability details Impact It is possible for a user to mislead a Pool Delegate to a seemingly innocuous loan by utilizing a token with more than 18 decimals as collateral and lucrative loan terms. Proof of Concept The final calculation within the collateralRequiredForDrawdown ...

CVE-2021-3004

The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...

CVE-2021-3004: Incorrect Calculation

The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...

PT-2021-18580

Name of the Vulnerable Software and Affected Versions Stable Yield Credit yCREDIT affected versions not specified Description The issue concerns incorrect calculations in the deposit function of the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token. This allows an...

Stable Yield Credit Security Breach

Stable Yield Credit is a new protocol for decentralized lending, stablecoin, and automated market maker AMM in one for the Stable Yield Credit community. Stable Yield Credit suffers from a security vulnerability that stems from certain miscalculations in the deposit function. An attacker could...

PT-2020-14673

Name of the Vulnerable Software and Affected Versions mruby versions prior to 2.1.2-rc Description The issue is a heap-based buffer overflow in the mrb yield with class function, located in vm.c, due to incorrect VM stack handling. This can be triggered via the stack copy function. Recommendation...

PT-2020-22216

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash state includes functions such as ihevcd jobq lock, ihevcd jobq yield, and ihevcd jobq...

PT-2019-14540

Name of the Vulnerable Software and Affected Versions generator crate versions prior to 0.6.18 Description The issue arises from the use of uninitialized memory by Scope, done, and yield during API calls. This can lead to undefined behavior UB in certain cases, such as using the API in a...

WS-2019-0611

PHP versions before 7.3.23 may attempt to read values outside of allocated buffer when raising exception inside the valid generator method while using a “yield from” statement...

WS-2019-0608

In PHP version 8.0.0RC2 a specially crafted PHP code may lead to use after free when attempting to update the node hierarchy in a multi yield from condition...

kernel security and bug fix update

2.6.32-504.16.2 - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181173 1179327 CVE-2014-8159 2.6.32-504.16.1 - fs gfs2: Move gfs2filesplicewrite outside of ifdef Robert S Peterson 1198329 1193559 - security keys: close race between key lookup and freeing...