CVE-2018-13709

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Tube, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-13716.5An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process CVE-2018-137107.5The mintToken function of a smart contract implementation for Mjolnir, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137117.5The mintToken function of a smart contract implementation for Databits, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137127.5The mintToken function of a smart contract implementation for PMET, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-137137.5The mintToken function of a smart contract implementation for Tradesman, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137147.5The mintToken function of a smart contract implementation for CM, an Ethereum token, has an integer overflow that allows the owner of the coCVE-2018-137157.5The mintToken function of a smart contract implementation for BpsToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137167.5The mintToken function of a smart contract implementation for sexhdsolo, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137177.5The mintToken function of a smart contract implementation for HormitechToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-137187.5The mintToken function of a smart contract implementation for FuturXe, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137197.5The mintToken function of a smart contract implementation for BiteduToken, an Ethereum token, has an integer overflow that allows the owner CVE-2018-13729.8IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it
CVE-2018-13709: High severity, CVSS 7.5 | Vulnix