PT-2018-9472
CVE-2018-1000618
·
Publicado
2018-07-09
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
eos versions after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 through commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d
Description
The issue is related to a stack overflow vulnerability in the
abi serializer that can be exploited via a network request, potentially affecting an eos network node.Recommendations
For eos versions after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 through commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d, update to a version after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d to resolve the issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾