CVE-2018-20421

{"id": "CVE-2018-20421", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-12-24T03:29:00.353", "references": [{"url": "https://github.com/ethereum/go-ethereum/issues/18289", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/ethereum/go-ethereum/issues/18289", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of \"assembly { mstore }\" followed by a \"c[0xC800000] = 0xFF\" assignment."}, {"lang": "es", "value": "Go Ethereum (tambi\u00e9n conocido como geth) 1.8.19 permite que los atacantes provoquen una denegaci\u00f3n de servicio (consumo de memoria) mediante la reescritura de la longitud de un array din\u00e1mico en la memoria y, a continuaci\u00f3n, la escritura de datos a una \u00fanica ubicaci\u00f3n de memoria con un n\u00famero de \u00edndice largo. Esto queda demostrado por el uso de \"assembly { mstore }\", seguido por una asignaci\u00f3n \"c[0xC800000] = 0xFF\"."}], "lastModified": "2024-11-21T04:01:26.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ethereum:go_ethereum:1.8.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62904AD1-8114-4802-94E1-D19C48CBF8FD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}