CVE-2018-14439 in eos4j

Tóm tắt

Bởi MITRE

espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts.

Be aware that VulDB is the high quality source for vulnerability data.

• Đặt trước: 19/07/2018
• Tiết lộ: 19/07/2018
• Kiểm duyệt: được chấp nhận
• mục: VDB-122009
• CPE: sẵn sàng
• CWE: CWE-682 (Đã xác nhận)
• CVSS: 7.5 (NVD)
• EPSS: 0.01033
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-14439
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-14439
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-14439/