CVE-2018-13443: Buffer Overflow
Published Apr 24, 2019
·Updated
EOS.IO jit-wasm 4.1 has a heap-based buffer overflow via a crafted wast file.
Affected Software
1 affected component
Block Jit-wasm=4.1
Event History
Apr 24, 2019
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
Description
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
An attacker needs to provide a crafted wast file. The CVSS vector indicates the attack can be delivered remotely without prior privileges, but user interaction is required.
2
What security impact could successful exploitation have?
The vulnerability is rated high with a CVSS 3.0 score of 8.8. Its vector indicates potential high impact to confidentiality, integrity, and availability.
3
Which component is identified as affected?
The affected software is identified as Block Jit-wasm, specifically EOS.IO jit-wasm 4.1.