CVE-2018-13640: Integer Overflow

Published Jul 9, 2018

Updated

The mintToken function of a smart contract implementation for EthereumSmart, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Affected Software

1 affected component

Ethereumsmart Project Ethereumsmart

Event History

Jul 9, 2018

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-13640?

CVE-2018-13640 is classified as a medium severity vulnerability due to the potential for unauthorized balance manipulation.

How do I fix CVE-2018-13640?

To fix CVE-2018-13640, update the mintToken function to include proper checks for integer overflow during token minting.

Who is affected by CVE-2018-13640?

CVE-2018-13640 affects users and smart contracts deployed using the EthereumSmart token implementation.

What type of vulnerability is CVE-2018-13640?

CVE-2018-13640 is an integer overflow vulnerability that affects the mintToken function of the EthereumSmart smart contract.

What can an attacker do with CVE-2018-13640?

An attacker can exploit CVE-2018-13640 to set the balance of any user to any arbitrary value, leading to potential financial loss.