CRITICAL🇬🇧 English

CVE-2017-14451

CVSS 10.0v3.1pub. 2020-12-02upd. 2024-11-21

An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send malicious smart contract to trigger this vulnerability.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Ethereum

    APP
    Ethereum
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEMemory
CWE
Referencje

Powiązane podatności

CVE-2018-15890CRITICAL9.8ten sam vendor

An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.j...

CVE-2026-26314HIGH8.7ten sam vendor

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16....

CVE-2026-22862HIGH7.1ten sam vendor

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can ...

CVE-2026-22868HIGH7.1ten sam vendor

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can ...

CVE-2023-42319HIGH7.5ten sam vendor

Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denia...