What’s Vulnerable › Vulnerabilities

CVE-2018-1000618

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-09 · updated 2026-06-17
• Weakness: CWE-674

Description

EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node. This attack appear to be exploitable via network request. This vulnerability appears to have been fixed in after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d .

Affected products

• Eosio Project Eos: all versions

References

• https://github.com/EOSIO/eos/pull/4112
• https://github.com/EOSIO/eos/pull/4112

Get alerted when CVE-2018-1000618 or the next vulnerability affects your stack