Описание
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling an external contract with no return value, the contract address (including side effects) could be evaluated twice. This may result in incorrect outcomes for contracts. This issue has been addressed in v0.3.4.
Ссылки
- PatchThird Party Advisory
- ExploitMitigationThird Party Advisory
- PatchThird Party Advisory
- ExploitMitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.3.4 (исключая)
cpe:2.3:a:vyperlang:vyper:*:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.00102
Низкий
8.2 High
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-670
CWE-670
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
Multiple evaluation of contract address in call in vyper
EPSS
Процентиль: 28%
0.00102
Низкий
8.2 High
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-670
CWE-670