Skip to content
OpenAdvisories

Package · PyPI

eth-abi

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium —

    eth-abi is vulnerable to recursive DoS

    This is related to recent ZST stuff (https://github.com/ethereum/eth-abi/security/advisories/GHSA-rqr8-pxh7-cq3g), but it's a different one. Basically a recursive pointer issue ```py from eth_abi import decode payload = "00000000000000000000000000000000000000…

  • Medium 4.3

    Ethereum ABI decoder DoS when parsing ZST

    With this notification I would like to inform about a DoS vector in the Ethereum ABI decoder. We have not yet found a way to exploit this with high impact, still the bug could potentially lead to a DoS in server systems. Feel free to ask about an extension of…