CVE-2021-25836

Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module

published February 8, 2021

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contracts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01260 · 69.4th percentile
Published
2021-02-08T17:54Z
EPSS history
Timeline
  • 08 FEB 17:54Z
    Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module
    cvelistv5