CVE-2018-13212: Integer Overflow
Published Jul 5, 2018
·Updated
The sell function of a smart contract implementation for EthereumLegit, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets.
Affected Software
1 affected component
Ethereumlegit Project Ethereumlegit
Event History
Jul 5, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-13212?
CVE-2018-13212 has a severity level that can lead to significant asset loss due to an integer overflow.
2
How do I fix CVE-2018-13212?
To fix CVE-2018-13212, it is recommended to update the smart contract implementation to handle integer overflows correctly.
3
What systems are affected by CVE-2018-13212?
CVE-2018-13212 affects the EthereumLegit smart contract implementation.
4
What is the impact of CVE-2018-13212 on users?
The impact of CVE-2018-13212 on users can result in an unintentional reduction of assets when selling tokens.
5
Is CVE-2018-13212 still exploitable?
CVE-2018-13212 remains exploitable if the vulnerable contract has not been patched or upgraded.