GHSA-vrcc-g6vj-mh5w
Denial of service in go-ethereum
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/ethereum/go-ethereum | <= 1.10.9 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go.
References
External links from the advisory. They lead to third-party sites.