Security advisory

{
  "id": "12b30976e355a1276703faf2304b3516b5a2a17c590ed032cc2827d3812c0901",
  "url": "https://osv.dev/vulnerability/CVE-2018-1000618",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2018-1000618",
    "summary": "EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node. This attack appear to be exploitable via network request. This vulnerability appears to have been fixed in after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d .",
    "evidence": "osv:CVE-2018-1000618",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2018-1000618",
      "aliases": [
        "CVE-2018-1000618"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/eosio/eos",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "f1545dd0ae2b77580c2236fdb70ae7138d2c7168"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "f1545dd0ae2b77580c2236fdb70ae7138d2c7168"
                      }
                    ],
                    "source": "DESCRIPTION"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v1.0.3",
            "v1.0.2",
            "v1.0.1",
            "v1.0.0",
            "DUMMY-TAG-PLEASE-IGNORE",
            "DAWN-2018-05-30",
            "dawn-v4.2.0",
            "DAWN-2018-05-22",
            "help",
            "dawn-v4.1.0",
            "DAWN-2018-05-16",
            "dawn-v4.0.0",
            "DAWN-2018-04-27-ALPHA",
            "DAWN-2018-04-23-ALPHA",
            "dawn-v3.0.0",
            "DAWN-2018-03-30-ALPHA",
            "DAWN-2018-03-29-ALPHA",
            "DAWN-2018-03-28-ALPHA",
            "DAWN-2018-03-23",
            "DAWN-2018-01-25-ALPHA",
            "DAWN-2018-01-31-ALPHA",
            "first_try_upload",
            "DAWN-2018-01-23-ALPHA",
            "DAWN-2018-01-18-ALPHA",
            "DAWN-2018-01-09-ALPHA",
            "STAT-2017-11-10",
            "dawn-v1.0.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000618.json"
          }
        }
      ],
      "modified": "2026-10-20T10:49:57.143797697Z",
      "provider": "osv",
      "references": [
        "https://github.com/EOSIO/eos/pull/4112"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2018-1000618",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 381025,
  "published_at": "2018-07-09T20:29:00.643+00:00"
}