CVE-2018-14439 in eos4j

सारांश

द्वारा MITRE

espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts.

Be aware that VulDB is the high quality source for vulnerability data.

• आरक्षित करना: 19/07/2018
• प्रकटीकरण: 19/07/2018
• संयम: स्वीकृत
• प्रविष्टि: VDB-122009
• CPE: तैयार
• CWE: CWE-682 (पुष्टि की गई)
• CVSS: 7.5 (NVD)
• EPSS: 0.01033
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-14439
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-14439
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-14439/