CVE-2025-24883

CVE-2025-24883 affects the Go Ethereum client (go-ethereum). A node can be forced offline or crash by processing a specially crafted P2P message, constituting a DoS condition. The CVE is linked to the Go Ethereum project (GO-2025-3436) describing a DoS via malicious P2P messages in github.com/eth...

CVE-2025-24883 go-ethereum has a DoS via malicious p2p message

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.14.13...

Go Ethereum 安全漏洞

Go Ethereum is an official Go implementation of the Ethernet protocol for the Ethereum community. A security vulnerability exists in Go Ethereum versions prior to 1.14.0 through 1.14.13, which stems from the fact that vulnerable nodes can force a shutdown/crash using a specially crafted message...

PT-2025-5590

Name of the Vulnerable Software and Affected Versions go-ethereum geth versions 1.14.0 through 1.14.12 Description A vulnerable node can be forced to shutdown or crash using a specially crafted message. Approximately 42.99% of geth nodes are still exposed to the issue, with around 18.5% of the...

GO-2022-0814 Go Ethereum Denial of Service in github.com/ethereum/go-ethereum

Go Ethereum Denial of Service in github.com/ethereum/go-ethereum...

GO-2022-0771 Shallow copy bug in geth in github.com/ethereum/go-ethereum

Shallow copy bug in geth in github.com/ethereum/go-ethereum...

GO-2022-0392 Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum

Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum...

Resource Exhaustion

go-ethereum geth is vulnerable to a Resource Exhaustion. The vulnerability is due to a lack of proper handling of specially crafted p2p messages sent from an attacker node, causing vulnerable nodes to consume excessive amounts of memory...

CVE-2024-32972 go-ethereum denial of service via malicious p2p message

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version 1.13.15...

CVE-2024-32972 go-ethereum denial of service via malicious p2p message

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version 1.13.15...

CVE-2024-32972

CVE-2024-32972 affects go-ethereum (geth). A vulnerable node can be forced to consume excessive memory by processing specially crafted p2p messages, triggering a denial of service. The underlying issue is related to handling certain p2p requests (notably a GetBlockHeadersRequest with crafted valu...

CVE-2024-32972 go-ethereum denial of service via malicious p2p message

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version 1.13.15...

go-ethereum vulnerable to DoS via malicious p2p message

Impact A vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. In order to carry out the attack, the attacker establishes a peer connections to the victim, and sends a malicious GetBlockHeadersRequest message...

PT-2024-25019 · Unknown · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: go-ethereum geth versions prior to 1.13.15 Description: A vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node, potentially resulting in a denial of servic...

Ethereum Go-ethereum 安全漏洞

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the Ethereum protocol in the Go language. A security vulnerability exists in Ethereum Go-ethereum versions prior to 1.13.15, which stems from a vulnerable node that may consume a large amount of memory when processing...

go-ethereum vulnerable to denial of service via crafted GraphQL query

Geth aka go-ethereum through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service memory consumption and daemon hang via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint is not designed to withstand attacks by hostile client...

CVE-2023-42319

Geth aka go-ethereum through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service memory consumption and daemon hang via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint is not designed to withstand attacks by hostile client...

Code injection

Geth aka go-ethereum through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service memory consumption and daemon hang via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint is not designed to withstand attacks by hostile client...

CVE-2023-42319

CVE-2023-42319 affects Geth (go-ethereum) up to v1.13.4 when running with --http and --graphql. The vulnerability allows remote attackers to trigger a denial of service by sending a crafted GraphQL query, leading to memory exhaustion and a daemon hang. The issue is a DoS condition caused by how t...

CVE-2023-42319

Geth aka go-ethereum through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service memory consumption and daemon hang via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint is not designed to withstand attacks by hostile client...