295 matches found
CVE-2021-43668
Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...
CVE-2021-43668
Go-Ethereum, version 1.10.9, is affected by a vulnerability that can cause a denial-of-service crash. The issue manifests as a runtime error: invalid memory address or nil pointer dereference, leading to a SEGV signal after the node processes a sequence of messages and cannot recover. The provide...
PT-2021-23900
Name of the Vulnerable Software and Affected Versions: Go-Ethereum version 1.10.9 Description: The issue causes Go-Ethereum nodes to crash, resulting in a denial of service, after receiving a series of messages. The crash occurs due to a runtime error, specifically an invalid memory address or ni...
CVE-2021-43668: NULL Pointer Dereference
Go-Ethereum 1.10.9 nodes crash denial of service after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal...
Ethereum Go-ethereum code issues and vulnerabilities
Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A code issue vulnerability exists in Go-Ethereum 1.10.9 that allows attackers to conduct denial of service attacks...
go-ethereum:fuzzTxfetcher: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6496701091807232 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzTxfetcher Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c0028d0420 Crash State: NULL Sanitizer: address ASAN...
CVE-2021-41173
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...
Design/Logic Flaw
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...
CVE-2021-41173
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...
CVE-2021-41173
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...
CVE-2021-41173 DoS via maliciously crafted p2p message
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...
CVE-2021-41173: Improper Input Validation
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside fro...
PT-2021-23148
Name of the Vulnerable Software and Affected Versions Go Ethereum versions prior to 1.10.9 Description A vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer, via the snap/1 protocol. The crash can be triggered by sending a malicious snap/1 GetTrieNode...
go-ethereum:fuzzStackTrie: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4658750733025280 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzStackTrie Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x218001781eb0 Crash State: NULL Sanitizer: address ASAN...
go-ethereum:fuzzTxfetcher: Crash in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=6678682534543360 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzTxfetcher Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004c900c Crash State: pthreadcreate cgotrypthreadcreat...
go-ethereum:fuzzDifficulty: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4909921536180224 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzDifficulty Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000024269e40 Crash State: NULL Sanitizer: address ASAN...
go-ethereum:fuzzTxfetcher: Crash in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=5723218489507840 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzTxfetcher Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: pthreadcreate...
CVE-2021-39137
go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...
CVE-2021-39137
go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...
CVE-2021-39137
go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...