CVEvulnerability
CVE-2021-41173
5.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-10-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.
Affected configurations
• ethereum go ethereum (< 1.10.9)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738 Patch, Third Party Advisory
- https://github.com/ethereum/go-ethereum/pull/23801 Patch, Third Party Advisory
- https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9 Release Notes, Third Party Advisory
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v Third Party Advisory
- https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738 Patch, Third Party Advisory
- https://github.com/ethereum/go-ethereum/pull/23801 Patch, Third Party Advisory
- https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9 Release Notes, Third Party Advisory
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v Third Party Advisory