Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-36184 Details

CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/aptos-labs/aptos-core/commit/47a0391c612407fe0b1051ef658a29e35d986963	CVE	Patch
https://github.com/move-language/move/issues/1059	CVE	Issue TrackingPatch
https://github.com/MystenLabs/sui/commit/8b681515c0cf435df2a54198a28ab4ef574d202b	CVE	Patch
https://medium.com/%40Beosin_com/critical-vulnerability-in-move-vm-can-cause-total-network-shutdown-and-potential-hard-fork-in-sui-49d0d942801c	CVE
https://github.com/aptos-labs/aptos-core/commit/47a0391c612407fe0b1051ef658a29e35d986963	[email protected]	Patch
https://github.com/move-language/move/issues/1059	[email protected]	Issue TrackingPatch
https://github.com/MystenLabs/sui/commit/8b681515c0cf435df2a54198a28ab4ef574d202b	[email protected]	Patch
https://medium.com/%40Beosin_com/critical-vulnerability-in-move-vm-can-cause-total-network-shutdown-and-potential-hard-fork-in-sui-49d0d942801c	[email protected]

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]

Product	Versions
aptosfoundation aptos	< 1.4.3
CPE cpe:2.3:a:aptosfoundation:aptos:::::::: Remediation No remediation found in references.
move project move	All versions
CPE cpe:2.3:a:move_project:move:-:::::::* Remediation No remediation found in references.
mystenlabs sui	< 1.2.1
CPE cpe:2.3:a:mystenlabs:sui:::::::: Remediation No remediation found in references.

6 change records found show changes

QUICK INFO