
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2020-20178 affects the Ethereum smart contract at address 0xe933c0cd9784414d5f278c114904f5a84b396919. The vulnerability was discovered and assigned on August 13, 2020. This security flaw is present in the latest version of the contract's code, specifically affecting the payout function (NVD, CVE).
The vulnerability is classified as a denial of service (DoS) issue in the payout function of the smart contract. The CVSS v3.1 base score is 7.5 (HIGH) with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability occurs when the length of an array becomes too long, resulting in an exception that can disrupt the contract's operation (NVD).
The primary impact of this vulnerability is on system availability. When exploited, it can cause a denial of service condition in the affected smart contract's payout function, potentially disrupting normal operations and preventing legitimate users from accessing the contract's functionality (NVD).
The vulnerability can be exploited by attackers through the creation of a series of account addresses that cause the array length to exceed its handling capacity. The attack vector is network-accessible (AV:N) with low attack complexity (AC:L) and requires no privileges (PR:N) or user interaction (UI:N) (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."