GitHub Advisoryadvisory · Go

GHSA-vrcc-g6vj-mh5w Denial of service in go-ethereum

HIGH Published 2022-03-18 Modified 2022-03-30 Official page ↗
Aliases
CVE-2021-42219
Ecosystem
Go
Packages
github.com/ethereum/go-ethereum
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2022-03-18

Affected packages

• Go github.com/ethereum/go-ethereum: <= 1.10.9 (no fix yet)

Description

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go.

Related

Alias · CVE (1)

  • CVE-2021-42219 Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References