CVE-2022-23327

Опубликовано: 04 мар. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).

Ссылки

http://ethereum.com
Broken Link
Not Applicable
http://go-ethereum.com
Broken Link
https://dl.acm.org/doi/pdf/10.1145/3460120.3485369
Exploit
Mitigation
Technical Description
Third Party Advisory
https://tristartom.github.io/docs/ccs21.pdf
Exploit
Mitigation
Technical Description
Third Party Advisory
http://ethereum.com
Broken Link
Not Applicable
http://go-ethereum.com
Broken Link
https://dl.acm.org/doi/pdf/10.1145/3460120.3485369
Exploit
Mitigation
Technical Description
Third Party Advisory
https://tristartom.github.io/docs/ccs21.pdf
Exploit
Mitigation
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*

Версия до 1.10.12 (включая)

EPSS

Процентиль: 67%

0.00533

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2022-23327

CVSS3: 7.5

debian

почти 4 года назад

A design flaw in Go-Ethereum 1.10.12 and older versions allows an atta ...

GHSA-pvx3-gm3c-gmpr

CVSS3: 7.5

github

почти 4 года назад

Denial of Service in Go-Ethereum

EPSS

Процентиль: 67%

0.00533

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo