CVE-2018-14576 Integer overflow in n/a

High 7.5 Published Updated

An integer overflow in the SunContract token minting function allows attackers to manipulate token supply, requiring a code patch to fix.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2018-14576?

CVE-2018-14576 is a high-severity vulnerability in n/a, published on 3 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable.

Weakness: CWE-190

Which versions are affected by CVE-2018-14576?

It affects 1 product.

Products include Suncontract Suncontract.

How do I fix CVE-2018-14576?

No fix has been published for CVE-2018-14576 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-14576 being exploited?

There is no known exploitation of CVE-2018-14576 in the wild and no public exploit code.

Sources

Also known as GHSA-6942-qcvw-qmh7.

Is CVE-2018-14576 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free