CyberSec.Space Logo
CVEブラウザに戻る

CVE-2018-14086

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1950%
EPSS Percentile38.58th
Published2018年7月16日
Last Modified2024年11月21日

Vulnerability Description

An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().

Affected Platforms (CPE)

📦
Mytoken Project

Mytoken

All versions

References & Advisories

🔗 https://github.com/hellowuzekai/blockchains/blob/master/overflow1.md
🔗 https://github.com/hellowuzekai/blockchains/blob/master/overflow1.md

関連する脆弱性情報

CVE-2018-132117.5

The sell function of a smart contract implementation for MyToken, an Ethereum token, has an integer overflow in which "amount * se...

CVE-2018-010110.0

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could ...

CVE-2018-100012410.0

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.p...

CVE-2018-409110.0

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. I...