This was discovered by Lilith (>_>) of Talos.


The library, which is leveraged by a large number of cryptocurrencies, contains an exploitable code vulnerability in the deserialization functionality. An attacker can send a specially crafted network to cause a logic flaw, resulting in remote code execution.

In accordance with our coordinated disclosure policy, Cisco Talos has worked with the developers of Monero ‘Lithium Luna’ to ensure that these issues have been resolved and that an update has been made available for affected users. It is recommended that this update is applied as quickly as possible to ensure that systems are no longer affected by this vulnerability.


Source link


Please enter your comment!
Please enter your name here