Paper/Archive/CVE-2023-42374

CVE-2023-42374

mystenlabs sui_blockchain — An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denial of service via…

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 71.2.712 × 2014.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denial of service via a crafted compressed script to the Sui node component.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

sui_blockchain< 1.6.31.6.3CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refmedium.com/%40Beosin_com/memory-bomb-vulnerability-causes-sui-node-to-crash-7e8e3ef5057c refgithub.com/MystenLabs/sui/commit/42d4ad103a21d23fecd7c0271453da41604e71e9 refbeosin.com/resources/%22memory-bomb%22-vulnerability-causes-sui-node-to-crash?lang=en-US