Lucene search
Veracode Vulnerability DatabaseVERACODE:36415HistoryJul 19, 2022 - 7:04 a.m.
Denial Of Service (DoS)
2022-07-1907:04:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
vulnerability
denial of service
signature implementation
account contracts
live networks
application crash
software
EPSS
0.003
Percentile
71.8%
openzeppelin_cairo_contracts is vulnerable to denial of service. The vulnerability exists because the account signature implementation is not properly handled which renders unusable account contracts in live networks causing an application crash.
References
github.com/advisories/GHSA-8mjr-jr5h-q2xr
github.com/OpenZeppelin/cairo-contracts/blob/release-0.2.0/src/openzeppelin/account/library.cairo#L203
github.com/OpenZeppelin/cairo-contracts/commit/2cd60279c3332285d47edf9ee3888b71257acdc9
github.com/OpenZeppelin/cairo-contracts/issues/386
github.com/OpenZeppelin/cairo-contracts/pull/387
github.com/OpenZeppelin/cairo-contracts/releases/tag/v0.2.1
github.com/OpenZeppelin/cairo-contracts/security/advisories/GHSA-8mjr-jr5h-q2xr
Related
veracode
veracode
Denial Of Service (DoS)
2022-07-18 07:33:32
osv
osv
CVE-2022-31153
2022-07-15 18:15:08
github
github
nvd
nvd
CVE-2022-31153
2022-07-15 18:15:08
prion
prion
Design/Logic Flaw
2022-07-15 18:15:00
cvelist
cvelist
cve
cve
CVE-2022-31153
2022-07-15 18:15:08