CVE-2018-19183

ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute

published November 12, 2018

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute. NOTE: the vendor disputes this because REVERT is a normal bytecode that can be triggered from high-level source code, leading to a normal programmatic execution result.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03101 · 87.7th percentile
Published
2018-11-12T00:00Z
EPSS history
Timeline
  • 12 NOV 00:00Z
    ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute
    cvelistv5