cve.bz

CVE-2018-18206

7.5 highEPSS 1.4%

High (7.5) in bytom bytom. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in github.com/bytom/bytom 1.0.4-0.20180831054840-1ac3c8ac4f2b, 1.0.6.

In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash.

Severity

CVSS 3.0

7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE
CWE-190
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-vc3x-gx6c-g99fGogithub.com/bytom/bytom<1.0.61.0.6
GO-2021-0079Gogithub.com/bytom/bytom<1.0.4-0.20180831054840-1ac3c8ac4f2b1.0.4-0.20180831054840-1ac3c8ac4f2b

References

Check your stackJSON