CVE-2018-11239

{"id": "CVE-2018-11239", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-05-19T18:29:00.227", "references": [{"url": "https://peckshield.com/2018/05/18/burnOverflow/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://peckshield.com/2018/05/18/burnOverflow/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "An integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a _to argument in conjunction with a large _value argument, as exploited in the wild in May 2018, aka the \"burnOverflow\" issue."}, {"lang": "es", "value": "Un desbordamiento de enteros en la funci\u00f3n _transfer de una implementaci\u00f3n de contrato inteligente para Hexagon (HXG), un token de Ethereum ERC20, permite que los atacantes logren un aumento no autorizado de los activos digitales proporcionando un argumento _to junto con un argumento _value grande, tal y como se explot\u00f3 \"in the wild\" en mayo de 2018. Este problema tambi\u00e9n se conoce como \"burnOverflow\"."}], "lastModified": "2024-11-21T03:42:58.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hexagontoken:hexagon:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40F123E8-1423-41CA-BC07-B1F16AEE5968"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}