Lucene search

K
cvelistMitreCVELIST:CVE-2022-23328
HistoryMar 04, 2022 - 11:24 a.m.

CVE-2022-23328

2022-03-0411:24:22
mitre
www.cve.org
6
design flaw
go-ethereum
denial of service
vulnerability
memory pool

EPSS

0.001

Percentile

42.9%

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node’s memory pool and then occupy the memory pool to prevent new transactions from entering the pool, resulting in a denial of service (DoS).

EPSS

0.001

Percentile

42.9%

Related for CVELIST:CVE-2022-23328