EUVD-2021-1389

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Geth before version 1.9.25 has a denial-of-service vulnerability affecting LES servers patched in 1.9.25

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-26264	11 Dec 202020:35	–	circl
CNNVD	Ethereum Go-ethereum 资源管理错误漏洞	11 Dec 202000:00	–	cnnvd
CNVD	Ethereum Go-ethereum Resource Management Error Vulnerability	12 Jan 202100:00	–	cnvd
CVE	CVE-2020-26264	11 Dec 202016:45	–	cve
Cvelist	CVE-2020-26264 LES Server DoS via GetProofsV2	11 Dec 202016:45	–	cvelist
Github Security Blog	Denial of service in github.com/ethereum/go-ethereum	29 Jun 202121:14	–	github
NVD	CVE-2020-26264	11 Dec 202017:15	–	nvd
OSV	GHSA-R33Q-22HV-J29Q Denial of service in github.com/ethereum/go-ethereum	29 Jun 202121:14	–	osv
OSV	GO-2021-0063 Nil pointer dereference via malicious RPC message in github.com/ethereum/go-ethereum	14 Apr 202120:04	–	osv
Prion	Denial of service	11 Dec 202017:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "44b44c86-5743-3cef-9124-3b188d8e0426",
        "vendor": {
          "name": "ethereum"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "be07cd5b-7509-3aa6-bf63-53341b472615",
        "product": {
          "name": "go-ethereum"
        },
        "product_version": "< 1.9.25"
      }
    ]
  }
]

Source	Link
github	www.github.com/ethereum/go-ethereum/security/advisories/GHSA-r33q-22hv-j29q
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26264
github	www.github.com/ethereum/go-ethereum/pull/21896
github	www.github.com/ethereum/go-ethereum/commit/bddd103a9f0af27ef533f04e06ea429cf76b6d46
github	www.github.com/ethereum/go-ethereum
github	www.github.com/ethereum/go-ethereum/releases/tag/v1.9.25
pkg	www.pkg.go.dev/vuln/GO-2021-0063
suse	www.suse.com/security/cve/CVE-2020-26264.html
security	www.security.archlinux.org/CVE-2020-26264
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

CVSS 24

EPSS0.00487