GHSA-2mw7-wggm-m6w3

Denial of Service in ethereumjs-vm

Source: GitHub Advisory Database (reviewed) High CVE-2018-19183

Packages

Ecosystem	Package	Affected	Fixed in
npm	ethereumjs-vm	<= 2.4.0	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2018-19183 advisory
https://github.com/ethereumjs/ethereumjs-vm/issues/386 web
https://github.com/advisories/GHSA-2mw7-wggm-m6w3 advisory
https://github.com/ethereumjs/ethereumjs-vm package