CVE-2020-20178

2021-05-2400:00:00

ubuntu.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

41.9%

JSON

Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version
is affected by a denial of service vulnerability in the affected payout
function. Once the length of this array is too long, it will result in an
exception. Attackers can make attacks by creating a series of account
addresses.

Bugs

Notes

Author	Note
mdeslaur	Description refers to openldap, RedHat bug refers to this CVE but is for ansible. SUSE bug refers to commits from CVE-2021-27212 Not clear what this CVE applies to as of 2021-06-09 As of 2021-06-18, mitre description has switched to something related to ethereum. Not sure what this CVE is about, but marking it as not-affected.