CVE-2018-12230 Integer overflow in n/a
Attackers can steal tokens or cause integer underflows in the RemiCoin smart contract due to a flawed logical check in the transferFrom function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-12230?
CVE-2018-12230 is a high-severity vulnerability in n/a, published on 10 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin (RMC), an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks.
Weakness: CWE-191
Which versions are affected by CVE-2018-12230?
It affects 1 product.
Products include Remicoin Project Remicoin.
How do I fix CVE-2018-12230?
No fix has been published for CVE-2018-12230 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-12230 being exploited?
There is no known exploitation of CVE-2018-12230 in the wild and no public exploit code.
Sources
Also known as CVE-2018-1000612, GHSA-h597-255v-99w3.