GitHub Advisoryadvisory · Go

GHSA-5m8f-chrv-7rw5 Denial of Service in Go-Ethereum

MEDIUM Published 2021-11-23 Modified 2023-09-18 Official page ↗
Aliases
CVE-2021-43668
Ecosystem
Go
Packages
github.com/ethereum/go-ethereum
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476
Reviewed
2021-11-19

Affected packages

• Go github.com/ethereum/go-ethereum: <= 1.10.9 (no fix yet)

Description

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal.

Related

Alias · CVE (1)

  • CVE-2021-43668 Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. vulnerability

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References