Description (CNA)
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ethereum / go-ethereum | affected < 1.10.9 |
CWE
CWE-20
References
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v
- https://github.com/ethereum/go-ethereum/pull/23801
- https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738
- https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9
ADP enrichment
No English description supplied.