CVE-2018-20421

2018-12-2403:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of “assembly { mstore }” followed by a “c[0xC800000] = 0xFF” assignment.

CPENameOperatorVersion
go-ethereumeq0.9.25
go-ethereumeq1.7.3
go-ethereumeq0.6.8
go-ethereumeq0.6.7
go-ethereumeq0.6.5
go-ethereumeq1.5.3
go-ethereumeq0.8.5
go-ethereumeq0.9.24
go-ethereumeq1.8.11
go-ethereumeq1.6.2

Name	Operator	Version
go-ethereum	eq	0.9.25
go-ethereum	eq	1.7.3
go-ethereum	eq	0.6.8
go-ethereum	eq	0.6.7
go-ethereum	eq	0.6.5
go-ethereum	eq	1.5.3
go-ethereum	eq	0.8.5
go-ethereum	eq	0.9.24
go-ethereum	eq	1.8.11
go-ethereum	eq	1.6.2

Rows per page:

1-10 of 1021

References

github.com/ethereum/go-ethereum/issues/18289