CVE-2020-12439

概要

参考情報

• mimblewimble/grin-security · Third Party Advisory
• mimblewimble/grin · Issue Tracking
• mimblewimble/grin#3236 · Patch

grin のその他の脆弱性

• CVE-2020-15899高 7.5Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.
• CVE-2020-6638高 7.5Grin through 2.1.1 has Insufficient Validation.
• CVE-2019-9195緊急 9.8util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP ar…