SB2018070920 - Integer overflow in netkilleradvancedtokenairdrop
Published: July 9, 2018 Updated: August 8, 2020
Security Bulletin ID
SB2018070920
CSH Severity
Medium
Patch available
NO
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Integer overflow (CVE-ID: CVE-2018-13761)
The vulnerability allows a remote attacker to manipulate contract balance.
The vulnerability exists in mintToken function of a smart contract implementation for NetkillerAdvancedTokenAirDrop that is an implementation of the Ethereum token. Successful exploitation of the vulnerability may allow the owner of the contract to set the balance of an arbitrary user to any value.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.