CVE-2018-13513: Integer Overflow
First published: Mon Jul 09 2018(Updated: )
The mintToken function of a smart contract implementation for Ubiou, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| aubio |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-13513?
CVE-2018-13513 has been classified with high severity due to the potential for arbitrary balance manipulation in the Ubiou token contract.
How do I fix CVE-2018-13513?
To fix CVE-2018-13513, you need to implement proper checks to prevent integer overflow in the mintToken function.
Who is affected by CVE-2018-13513?
Users of the Ubiou Ethereum token and any smart contracts relying on its implementation are affected by CVE-2018-13513.
What can attackers do with CVE-2018-13513?
Attackers can exploit CVE-2018-13513 to set the balance of any user to an arbitrary value, potentially leading to significant financial losses.
Is CVE-2018-13513 a common vulnerability?
CVE-2018-13513 underscores a common vulnerability in Ethereum smart contracts related to integer overflow that can affect various tokens.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/weakness
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ubiou
- canonical/aubio