GHSA-mr7q-c9w9-wh4h
go-ethereum is vulnerable to DoS via malicious p2p message affecting a vulnerable node
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/ethereum/go-ethereum | < 1.16.8 | 1.16.8 |
Details
As written in the advisory (Markdown source, shown as plain text).
**Impact**
A vulnerable node can be forced to shutdown/crash using a specially crafted message.
More details to be released later.
**Credit**
This issue was reported to the Ethereum Foundation Bug Bounty Program by DELENE TCHIO ROMUALD.
References
External links from the advisory. They lead to third-party sites.