GHSA-773q-5334-5gf9: Memory over-allocation in evm-core

August 25, 2021

Prior to the patch, when executing specific EVM opcodes related to memory operations that use evm_core::Memory::copy_large, the crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack.

The flaw was corrected in commit 19ade85.

References

github.com/advisories/GHSA-773q-5334-5gf9
github.com/rust-blockchain/evm
github.com/rust-blockchain/evm/commit/19ade85
rustsec.org/advisories/RUSTSEC-2021-0066.html

Code Behaviors & Features

Detect and mitigate GHSA-773q-5334-5gf9 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →