CVE-2018-13537: Integer Overflow

Published Jul 9, 2018

Updated

The mintToken function of a smart contract implementation for EthereumLegit, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Affected Software

1 affected component

Ethereumlegit Project Ethereumlegit

Event History

Jul 9, 2018

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-13537?

CVE-2018-13537 is classified as a high-severity vulnerability due to the potential for arbitrary balance manipulation.

How do I fix CVE-2018-13537?

To fix CVE-2018-13537, ensure that your mintToken function properly checks for and mitigates integer overflow vulnerabilities.

What impacts does CVE-2018-13537 have on EthereumLegit?

CVE-2018-13537 allows the contract owner to set any user's token balance to an arbitrary value, leading to loss of integrity.

Who is affected by CVE-2018-13537?

Users of the EthereumLegit token and its holders are affected by CVE-2018-13537.

Is there a patch available for CVE-2018-13537?

There is currently no specific public patch for CVE-2018-13537 and affected users should assess their contracts for vulnerabilities.