nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-11687 CVE-2018-11687
HIGH
bitcoin_red_project bitcoin_red Integer Overflow or Wraparound
Record summary
CVE-2018-11687 has a selected CVSS score of 7.5 (high).
Description
An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May 2018, aka the "ownerUnderflow" issue.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Aug 15, 2018 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
bitcoin_redBrowse bitcoin_red_project / bitcoin_red | VulnCheck | Version data not supplied | |
References
2anquanke.com
https://www.anquanke.com/post/id/147913