Py-EVM is vulnerable to arbitrary bytecode injection · CVE-2018-18920 · GitHub Advisory Database · GitHub

Py-EVM is vulnerable to arbitrary bytecode injection

High severity GitHub Reviewed Published Nov 21, 2018 to the GitHub Advisory Database • Updated Sep 1, 2023

Package

py-evm (pip)

Affected versions

<= 0.2.0a33

Patched versions

None

Description

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed indefinitely without gas being paid."

References

Published to the GitHub Advisory Database Nov 21, 2018

Reviewed Jun 16, 2020

Last updated Sep 1, 2023

Severity

High

8.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H