GHSA-773q-5334-5gf9

Source

https://github.com/advisories/GHSA-773q-5334-5gf9

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-773q-5334-5gf9/GHSA-773q-5334-5gf9.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-773q-5334-5gf9

Aliases

RUSTSEC-2021-0066

Published

2021-08-25T20:55:36Z

Modified

2023-11-08T04:16:40.750878Z

Summary

Memory over-allocation in evm-core

Details

Prior to the patch, when executing specific EVM opcodes related to memory operations that use evm_core::Memory::copy_large, the crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack.

The flaw was corrected in commit 19ade85.

Database specific

{
    "nvd_published_at": null,
    "cwe_ids": [
        "CWE-789"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2021-08-18T21:38:27Z"
}

References