CVE-2024-37153

Description

Contract balance not updating correctly after interchain transaction in github.com/evmos/evmos

Affected packages (31)

• Go/github.com/evmos/evmosfrom 0
• Go/github.com/evmos/evmos/v10from 0
• Go/github.com/evmos/evmos/v10from 0, < 18.1.0
• Go/github.com/evmos/evmos/v11from 0
• Go/github.com/evmos/evmos/v11from 0, < 18.1.0
• Go/github.com/evmos/evmos/v12from 0, < 18.1.0
• Go/github.com/evmos/evmos/v12from 0
• Go/github.com/evmos/evmos/v13from 0
• Go/github.com/evmos/evmos/v13from 0, < 18.1.0
• Go/github.com/evmos/evmos/v14from 0, < 18.1.0
• Go/github.com/evmos/evmos/v14from 0
• Go/github.com/evmos/evmos/v15from 0, < 18.1.0
• Go/github.com/evmos/evmos/v15from 0
• Go/github.com/evmos/evmos/v16from 0, < 18.1.0
• Go/github.com/evmos/evmos/v16from 0
• Go/github.com/evmos/evmos/v17from 0, < 18.1.0
• Go/github.com/evmos/evmos/v17from 0
• Go/github.com/evmos/evmos/v18from 0, < 18.1.0
• Go/github.com/evmos/evmos/v18from 0, < 18.1.0
• Go/github.com/evmos/evmos/v2from 0
• Go/github.com/evmos/evmos/v3from 0
• Go/github.com/evmos/evmos/v4from 0
• Go/github.com/evmos/evmos/v5from 0
• Go/github.com/evmos/evmos/v6from 0, < 18.1.0
• Go/github.com/evmos/evmos/v6from 0
• Go/github.com/evmos/evmos/v7from 0
• Go/github.com/evmos/evmos/v7from 0, < 18.1.0
• Go/github.com/evmos/evmos/v8from 0, < 18.1.0
• Go/github.com/evmos/evmos/v8from 0
• Go/github.com/evmos/evmos/v9from 0, < 18.1.0
• Go/github.com/evmos/evmos/v9from 0

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-37153
• PATCHhttps://github.com/evmos/evmos
• WEBhttps://github.com/evmos/evmos/commit/478b7a62e7af57a70cf3a01126c7f5a89bee69d7
• WEBhttps://github.com/evmos/evmos/security/advisories/GHSA-xgr7-jgq3-mhmc
• WEBhttps://pkg.go.dev/vuln/GO-2024-2903