ethereumjs/ethereumjs-monorepo

ethereumjs/ethereumjs-monorepo

GitHubGitHub
GitHubgithub.com
Releases566
Frequency6 days 21 hours
Last Release
Stars2.76K
Ethereum L1 Protocol Stack and EVM in TypeScript
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-19183↗
7.5 HIGH5 MEDIUM

ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute. NOTE: the vendor disputes this because REVERT is a normal bytecode that can be triggered from high-level source code, leading to a normal programmatic execution result.