漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
ethereum does not check transaction malleability for EIP-2930, EIP-1559 and EIP-7702 transactions
Vulnerability Description
ethereum is a common ethereum structs for Rust. Prior to ethereum crate v0.18.0, signature malleability (according to EIP-2) was only checked for "legacy" transactions, but not for EIP-2930, EIP-1559 and EIP-7702 transactions. This is a specification deviation. The signature malleability itself is not a security issue and not as high of a risk if the ethereum crate is used on a single-implementation blockchain. This issue has been patched in version v0.18.0. A workaround for this issue involves manually checking transaction malleability outside of the crate, however upgrading is recommended.
CVSS Information
N/A
Vulnerability Type
对因果或异常条件的不恰当检查
Vulnerability Title
ethereum-rs 代码问题漏洞
Vulnerability Description
ethereum-rs是Rust Ethereum开源的一个Rust库。 ethereum-rs v0.18.0之前版本存在代码问题漏洞,该漏洞源于签名可塑性检查不完整。
CVSS Information
N/A
Vulnerability Type
N/A