PT-2018-11706 · Unknown · Veu Tokenerc20

Published 2018-07-05 · Updated 2018-08-27 · CVE-2018-13224

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions VEU TokenERC20 (affected versions not specified)

Description The issue concerns an integer overflow in the sell function of the VEU TokenERC20 smart contract implementation. Specifically, when calculating amount * sellPrice, if the result is zero, it can lead to a reduction in a seller's assets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2018-13224

Affected Products

Veu Tokenerc20

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-13224 · Security Note
• https://github.com/BlockChainsSecurity/EtherTokens/tree/master/TokenERC20 · Note
• https://github.com/BlockChainsSecurity/EtherTokens/blob/master/ETHEREUMBLACK/sell%20integer%20overflow.md · Note