New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerability issue with ethereumjs-vm 2.4.0 #52

Open

zh-m opened this issue Nov 23, 2018 · 0 comments

Collaborator

zh-m commented Nov 23, 2018

Alert:

CVE-2018-19183
low severity
Vulnerable versions: <= 2.4.0
Patched version: No fix
ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute.
Opened automatically by GitHub on 22.11.2018.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment