{"id":"GHSA-773q-5334-5gf9","summary":"Memory over-allocation in evm-core","details":"Prior to the patch, when executing specific EVM opcodes related\nto memory operations that use `evm_core::Memory::copy_large`, the\ncrate can over-allocate memory when it is not needed, making it\npossible for an attacker to perform denial-of-service attack.\n\nThe flaw was corrected in commit `19ade85`.\n","aliases":["RUSTSEC-2021-0066"],"modified":"2023-11-08T04:16:40.750878Z","published":"2021-08-25T20:55:36Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2021-08-18T21:38:27Z","nvd_published_at":null,"cwe_ids":["CWE-789"],"severity":"MODERATE"},"references":[{"type":"WEB","url":"https://github.com/rust-blockchain/evm/commit/19ade85"},{"type":"PACKAGE","url":"https://github.com/rust-blockchain/evm"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2021-0066.html"}],"affected":[{"package":{"name":"evm-core","ecosystem":"crates.io","purl":"pkg:cargo/evm-core"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.26.0"},{"fixed":"0.26.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-773q-5334-5gf9/GHSA-773q-5334-5gf9.json"}},{"package":{"name":"evm-core","ecosystem":"crates.io","purl":"pkg:cargo/evm-core"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.25.0"},{"fixed":"0.25.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-773q-5334-5gf9/GHSA-773q-5334-5gf9.json"}},{"package":{"name":"evm-core","ecosystem":"crates.io","purl":"pkg:cargo/evm-core"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.24.0"},{"fixed":"0.24.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-773q-5334-5gf9/GHSA-773q-5334-5gf9.json"}},{"package":{"name":"evm-core","ecosystem":"crates.io","purl":"pkg:cargo/evm-core"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.23.0"},{"fixed":"0.23.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-773q-5334-5gf9/GHSA-773q-5334-5gf9.json"}},{"package":{"name":"evm-core","ecosystem":"crates.io","purl":"pkg:cargo/evm-core"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.21.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-773q-5334-5gf9/GHSA-773q-5334-5gf9.json"}}],"schema_version":"1.9.0"}