~ / search / GHSA-vrcc-g6vj-mh5w

GHSA-vrcc-g6vj-mh5w

Denial of service in go-ethereum

Source: GitHub Advisory Database (reviewed) High CVE-2021-42219

Packages

EcosystemPackageAffectedFixed in
Go github.com/ethereum/go-ethereum <= 1.10.9 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go.

References

External links from the advisory. They lead to third-party sites.