Lucene search

K
osvGoogleOSV:CVE-2022-29177
HistoryMay 20, 2022 - 5:15 p.m.

CVE-2022-29177

2022-05-2017:15:07
Google
osv.dev
3
go ethereum
vulnerability
high verbosity logging
p2p messages
attacker node
patch
workaround

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

39.2%

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that addresses the problem. As a workaround, setting loglevel to default level (INFO) makes the node not vulnerable to this attack.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

39.2%

Related for OSV:CVE-2022-29177