Описание
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.10.9 (исключая)
cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00175
Низкий
5.7 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-20
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.7
debian
больше 4 лет назад
Go Ethereum is the official Golang implementation of the Ethereum prot ...
CVSS3: 5.7
github
больше 4 лет назад
Geth Node Vulnerable to DoS via maliciously crafted p2p message
EPSS
Процентиль: 39%
0.00175
Низкий
5.7 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-20
NVD-CWE-noinfo