PT-2023-25761 · Unknown · Ethereum Blockchain

CVE-2023-36980

·

Publicado

2023-09-11

·

Atualizado

2024-09-26

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Ethereum Blockchain version 0.1.1+commit.6ff4cd6
Description An issue in the Ethereum Blockchain causes the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold.
Recommendations For Ethereum Blockchain version 0.1.1+commit.6ff4cd6, as a temporary workaround, consider restricting the use of the betsize and casino.balance variables to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-682

Identificadores relacionados

CVE-2023-36980

Produtos afetados

Ethereum Blockchain