CVE-2018-3972 An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) and other cryptocurrenci...
CriticalCVSS 9.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) and other cryptocurrencies. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| getmonero monero | = 0.12.2.0 | No fix listed |
| https://github.com/sabelnikov Epee | = as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) | No fix listed |
References
- blog.talosintelligence.com third-party-advisory
- www.talosintelligence.com exploit third-party-advisory