CVE-2018-14439

{"id": "CVE-2018-14439", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-07-20T00:29:00.503", "references": [{"url": "http://www.bishijie.com/kuaixun_80841", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/espritblock/eos4j/issues/6", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.bishijie.com/kuaixun_80841", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/espritblock/eos4j/issues/6", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-682"}]}], "descriptions": [{"lang": "en", "value": "espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts."}, {"lang": "es", "value": "espritblock eos4j, un SDK no oficial para EOS, hasta el 2018-07-12, gestiona de manera incorrecta los n\u00fameros de punto flotante con m\u00e1s de cuatro d\u00edgitos tras el punto decimal, lo que podr\u00eda permitir que atacantes desencadene transferencias de dinero de cantidades no planeadas."}], "lastModified": "2024-11-21T03:49:03.483", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:eblock:eos4j:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC2F15D2-317A-4543-96F5-5ED6F39BC0D1", "versionEndIncluding": "2018-07-12"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}