CVE-2018-18920

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x'…

published November 12, 2018

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed indefinitely without gas being paid."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02926 · 87.0th percentile
Published
2018-11-12T02:00Z
EPSS history
Timeline
  • 12 NOV 02:00Z
    Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x'…
    cvelistv5