CVE-2018-1000618 - EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node

Back Back to CVE browser

CRITICAL

EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node

Published Jul 9, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.53%

Description

EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node. This attack appear to be exploitable via network request. This vulnerability appears to have been fixed in after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d .

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-674

References (1)

https://github.com/EOSIO/eos/pull/4112
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
https://github.com/EOSIO/eos/pull/4112		x_refsource_CONFIRMThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 9, 2018

Updated Sep 16, 2024

Reserved Jul 9, 2018

Link CVE-2018-1000618

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-1000618

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-1000618