Lucene search
+L

226 matches found

Github Security Blog
Github Security Blog
added 2021/11/23 6:4 p.m.33 views

Denial of Service in Go-Ethereum

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

5.5CVSS3.5AI score0.00251EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2021/11/18 4:15 p.m.23 views

CVE-2021-43668

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

5.5CVSS0.00251EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/18 4:15 p.m.7 views

CVE-2021-43668

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

5.5CVSS6AI score0.00251EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/18 4:15 p.m.13 views

CVE-2021-43668

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

5.5CVSS6.8AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/11/18 4:15 p.m.34 views

CVE-2021-43668

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

5.5CVSS6AI score0.00251EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/18 4:15 p.m.22 views

Null pointer dereference

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

2.1CVSS5.5AI score0.00251EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/11/18 4:15 p.m.11 views

UBUNTU-CVE-2021-43668

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

5.5CVSS6AI score0.00251EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/11/18 3:5 p.m.36 views

CVE-2021-43668

Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...

5.8AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/18 3:5 p.m.63 views

CVE-2021-43668

Go-Ethereum, version 1.10.9, is affected by a vulnerability that can cause a denial-of-service crash. The issue manifests as a runtime error: invalid memory address or nil pointer dereference, leading to a SEGV signal after the node processes a sequence of messages and cannot recover. The provide...

5.5CVSS5.4AI score0.00251EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/11/18 12:0 a.m.11 views

Ethereum Go-ethereum 代码问题漏洞

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A code issue vulnerability exists in Go-Ethereum 1.10.9 that allows attackers to conduct denial of service attacks...

5.5CVSS5.8AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/26 2:15 p.m.17 views

CVE-2021-41173

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...

5.7CVSS0.01242EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/10/26 2:15 p.m.8 views

CVE-2021-41173

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...

5.7CVSS6.2AI score0.01242EPSS
SaveExploits0References5Affected Software1
Prion
Prion
added 2021/10/26 2:15 p.m.21 views

Design/Logic Flaw

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...

3.5CVSS5.6AI score0.01242EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/10/26 2:5 p.m.28 views

CVE-2021-41173 DoS via maliciously crafted p2p message

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...

5.7CVSS5.8AI score0.01242EPSS
SaveExploits0References4
NVD
NVD
added 2021/08/24 4:15 p.m.46 views

CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

7.5CVSS0.01325EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/24 4:15 p.m.33 views

CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

7.5CVSS6.6AI score0.01325EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/08/24 4:15 p.m.7 views

CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

7.5CVSS5.9AI score0.01325EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/08/24 4:5 p.m.131 views

CVE-2021-39137

The CVE-2021-39137 entry concerns go-ethereum (Geth). A memory-corruption/consensus flaw in the EVM can cause a node to reject or diverge from the canonical chain, potentially leading to chain splits as described in multiple advisories. A patch is included in the v1.10.8 release; no workaround is...

7.5CVSS6.7AI score0.01325EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/08/24 12:0 a.m.6 views

PT-2021-7369 · Unknown · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: go-ethereum versions prior to v1.10.8 Description: A consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. This issue is related to a memory-corruption bug withi...

7.5CVSS7.1AI score0.01325EPSS
SaveExploits0References16
CNNVD
CNNVD
added 2021/08/24 12:0 a.m.10 views

Ethereum Go-ethereum 缓冲区错误漏洞

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A buffer error vulnerability exists in Go-Ethereum, which stems from a product that can cause a chain split. The following products and versions are affected: Go-Ethereum v1.10...

7.5CVSS7.4AI score0.01325EPSS
SaveExploits0References2
Rows per page
Query Builder