CVE-2021-39137

The CVE-2021-39137 entry concerns go-ethereum (Geth). A memory-corruption/consensus flaw in the EVM can cause a node to reject or diverge from the canonical chain, potentially leading to chain splits as described in multiple advisories. A patch is included in the v1.10.8 release; no workaround is...

CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

Ethereum Go-ethereum buffer error vulnerability

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A buffer error vulnerability exists in Go-Ethereum, which stems from a product that can cause a chain split. The following products and versions are affected: Go-Ethereum v1.10...

PT-2021-7369 · Unknown · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: go-ethereum versions prior to v1.10.8 Description: A consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. This issue is related to a memory-corruption bug withi...

CVE-2021-39137: Interpretation Conflict

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

go-ethereum:fuzz_g2_add: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5105189177655296 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzg2add Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

go-ethereum:fuzz_g2_mul: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6609736303771648 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzg2mul Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

GHSA-9H4H-8W5P-F28W Go Ethereum Denial of Service

cmd/evm/runner.go in Go Ethereum aka geth allows attackers to cause a denial of service SEGV via crafted bytecode. Specific Go Packages Affected github.com/ethereum/go-ethereum/cmd/evm...

Denial of service in go-ethereum due to CVE-2020-28362

Impact Versions of Geth built with Go 1.15.5 or 1.14.12 are most likely affected by a critical DoS-related security vulnerability. The golang team has registered the underlying flaw as ‘CVE-2020-28362’. We recommend all users to rebuild ideally v1.9.24 with Go 1.15.5 or 1.14.12, to avoid node...

GHSA-M6GX-RHVJ-FH52 Denial of service in go-ethereum due to CVE-2020-28362

Impact Versions of Geth built with Go 1.15.5 or 1.14.12 are most likely affected by a critical DoS-related security vulnerability. The golang team has registered the underlying flaw as ‘CVE-2020-28362’. We recommend all users to rebuild ideally v1.9.24 with Go 1.15.5 or 1.14.12, to avoid node...

go-ethereum:fuzzStackTrie: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4762413883850752 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzStackTrie Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000242a065c Crash State: NULL Sanitizer: address ASAN...

GHSA-QR2J-WRHX-4829 Go Ethereum Improper Input Validation

In Go Ethereum aka geth before 1.8.14, TraceChain in eth/apitracer.go does not verify that the end block is after the start block. Specific Go Packages Affected github.com/ethereum/go-ethereum/eth...

go-ethereum:fuzz_g2_add: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5486373806145536 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzg2add Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

go-ethereum:fuzz_cross_g1_multiexp: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5322815411716096 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzcrossg1multiexp Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN...

go-ethereum:fuzzStackTrie: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5468022765649920 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzStackTrie Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201330 Crash State: NULL Sanitizer: address ASAN...

go-ethereum:fuzz_g1_multiexp: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5769867430068224 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzg1multiexp Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

go-ethereum:fuzzDifficulty: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6061920195051520 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzDifficulty Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

go-ethereum:fuzzLes: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6386801252106240 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzLes Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000215c5ef4 Crash State: NULL Sanitizer: address ASAN Recommende...

Ethereum Go-ethereum Resource Management Error Vulnerability

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A security vulnerability exists in Ethereum Go-ethereum versions prior to 1.9.25, which stems from a denial of service vulnerability that can crash the LES server via a malicio...

Go Ethereum and before version Security Vulnerabilities

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A security vulnerability exists in Go Ethereum 1.9.4 and before version 1.9.20, which stems from the possibility of a chain break where the vulnerable version rejects the...