Lucene search
+L

63 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:53 a.m.•16 views

SUSE CVE-2020-26265

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

5.3CVSS5.4AI score0.0092EPSS
SaveExploits0References3
OSV
OSV
•added 2022/07/15 11:07 p.m.•42 views

GO-2022-0254 Consensus flaw during block processing in github.com/ethereum/go-ethereum

A vulnerability in the Geth EVM can cause a node to reject the canonical chain. A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different stateRoot when processing a maliciously crafted transaction. This, in turn, would lead to the chain being...

7.5CVSS7.3AI score0.01325EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2021/08/30 4:15 p.m.•58 views

Ethereum Contains Consensus Flaw During Block Processing

Impact A vulnerability in the Geth EVM could cause a node to reject the canonical chain. Description A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different stateRoot when processing a maliciously crafted transaction. This, in turn, would lead...

7.5CVSS7AI score0.01325EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/08/24 4:15 p.m.•37 views

CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

7.5CVSS6.6AI score
SaveExploits0References2
NVD
NVD
•added 2021/08/24 4:15 p.m.•49 views

CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

7.5CVSS0.01325EPSS
SaveExploits0References2
Prion
Prion
•added 2021/08/24 4:15 p.m.•23 views

Design/Logic Flaw

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

5CVSS7.4AI score0.01325EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/08/24 4:15 p.m.•10 views

CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a late...

7.5CVSS5.9AI score0.01325EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2021/08/24 4:05 p.m.•146 views

CVE-2021-39137

The CVE-2021-39137 entry concerns go-ethereum (Geth). A memory-corruption/consensus flaw in the EVM can cause a node to reject or diverge from the canonical chain, potentially leading to chain splits as described in multiple advisories. A patch is included in the v1.10.8 release; no workaround is...

7.5CVSS6.7AI score0.01325EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/24 12:00 a.m.•10 views

PT-2021-7369 · Unknown · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: go-ethereum versions prior to v1.10.8 Description: A consensus-vulnerability in go-ethereum Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. This issue is related to a memory-corruption bug withi...

7.5CVSS7.1AI score0.01325EPSS
SaveExploits0References16
CNNVD
CNNVD
•added 2021/08/24 12:00 a.m.•14 views

Ethereum Go-ethereum 缓冲区错误漏洞

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A buffer error vulnerability exists in Go-Ethereum, which stems from a product that can cause a chain split. The following products and versions are affected: Go-Ethereum v1.10...

7.5CVSS7.4AI score0.01325EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/29 9:14 p.m.•80 views

GHSA-XW37-57QP-9MM4 Consensus flaw during block processing in github.com/ethereum/go-ethereum

Impact A consensus-vulnerability in Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Description A flaw was repoted at 2020-08-11 by John Youngseok Yang Software Platform Lab, where a particular sequence of transactions could cause a consensus failur...

5.3CVSS5.2AI score0.0092EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2021/06/29 9:14 p.m.•90 views

Consensus flaw during block processing in github.com/ethereum/go-ethereum

Impact A consensus-vulnerability in Geth could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Description A flaw was repoted at 2020-08-11 by John Youngseok Yang Software Platform Lab, where a particular sequence of transactions could cause a consensus failur...

5.3CVSS5.4AI score0.0092EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2021/06/29 9:13 p.m.•45 views

GHSA-69V6-XC2J-R2JF Shallow copy bug in geth

Impact This is a Consensus vulnerability, which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth’s pre-compiled dataCopy at 0x00...04 contract did a shallow copy on invocation. An attacker could deploy a contract that - writes X to an EVM memory region R,...

6.5CVSS6.8AI score0.01226EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2021/06/29 9:13 p.m.•92 views

Shallow copy bug in geth

Impact This is a Consensus vulnerability, which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth’s pre-compiled dataCopy at 0x00...04 contract did a shallow copy on invocation. An attacker could deploy a contract that - writes X to an EVM memory region R,...

7.1CVSS6.8AI score0.01226EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2020/12/14 7:59 a.m.•25 views

Consensus Flaw During Block Processing

github.com/ethereum/go-ethereum is having a consensus flaw during block processing. It leads to a chain split, where vulnerable versions refuse to accept the canonical chain...

5.3CVSS2.2AI score0.0092EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2020/12/11 5:15 p.m.•42 views

CVE-2020-26265

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

5.3CVSS5.3AI score0.0092EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/11 5:15 p.m.•24 views

Code injection

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

3.5CVSS5.3AI score0.0092EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/12/11 4:45 p.m.•69 views

CVE-2020-26265

Go Ethereum (Geth) up to v1.9.19 (inclusive) is affected by a consensus vulnerability that could lead to a chain split where non-canonical chains are rejected. The issue stems from how state/account creation interacted with deleted accounts, causing inconsistent consensus under certain transactio...

5.3CVSS5.2AI score0.0092EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/11/25 2:15 a.m.•23 views

CVE-2020-26241

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy at 0x00...04 contract di...

7.1CVSS6.6AI score
SaveExploits0References2
NVD
NVD
•added 2020/11/25 2:15 a.m.•33 views

CVE-2020-26241

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy at 0x00...04 contract di...

7.1CVSS6.4AI score0.01226EPSS
SaveExploits0References2
Rows per page
Query Builder