Veracode Vulnerability DatabaseVERACODE:41337Denial Of Service
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H
0.001 Low
EPSS
Percentile
26.7%
github.com/multiversx/mx-chain-go is vulnerable to Denial Of Service. The vulnerability exists due to a lack of validation in the inner transaction, which allows an attacker to cause a denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/multiversx/mx-chain-go | le | v1.4.16 | |
| github.com/multiversx/mx-chain-go | le | v1.4.16 |
References
github.com/advisories/GHSA-j494-7x2v-vvvp
github.com/multiversx/mx-chain-go/blob/babdb144f1316ab6176bf3dbd7d4621120414d43/integrationTests/vm/txsFee/relayedMoveBalance_test.go#LL165C14-L165C14
github.com/multiversx/mx-chain-go/commit/babdb144f1316ab6176bf3dbd7d4621120414d43
github.com/multiversx/mx-chain-go/releases/tag/v1.4.17
github.com/multiversx/mx-chain-go/security/advisories/GHSA-j494-7x2v-vvvp
Related
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H
0.001 Low
EPSS
Percentile
26.7%