Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-30837

Good to know:

icon

Date: May 8, 2023

Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.

Language: Python

Severity Score

Related Resources (6)

https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-76.yaml
https://github.com/vyperlang/vyper/commit/0bb7203b584e771b23536ba065a6efda457161bb
https://github.com/vyperlang/vyper/security/advisories/GHSA-mgv8-gggw-mrg6
https://nvd.nist.gov/vuln/detail/CVE-2023-30837
https://github.com/vyperlang/vyper
https://www.mend.io/vulnerability-database/CVE-2023-30837

Severity Score

Weakness Type (CWE)

Memory Allocation with Excessive Size Value

CWE-789

Top Fix

icon

Upgrade Version

Upgrade to version vyper - 0.3.8

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us