Описание
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e, 1.12.2-unstable and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Ссылки
- Product
- Release Notes
- Third Party Advisory
- Product
- Release Notes
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.10.0 (включая) до 1.12.1 (исключая)
cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00315
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
debian
больше 2 лет назад
go-ethereum (geth) is a golang execution layer implementation of the E ...
CVSS3: 7.5
github
больше 2 лет назад
Go-Ethereum vulnerable to denial of service via malicious p2p message
EPSS
Процентиль: 54%
0.00315
Низкий
7.5 High
CVSS3
Дефекты
CWE-400