CVE-2018-12018

CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial...

GHSA-P5GC-957X-GFW9 Go Ethereum LES protocol implementation vulnerable to Denial of Service

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip...

go-ethereum:fuzzLes: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6386801252106240 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzLes Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000215c5ef4 Crash State: NULL Sanitizer: address ASAN Recommende...

Integer overflow

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip...

CVE-2018-12018

CVE-2018-12018 affects Go Ethereum (geth) LES GetBlockHeadersMsg handling prior to v1.8.11. An integer signedness error for the array index allows a crafted query with Skip = -1 to crash a remote node (EPoD). The vulnerability occurs when the server validates the requested headers after skipping ...

CVE-2018-12018

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip...

PT-2018-10944

Name of the Vulnerable Software and Affected Versions geth versions prior to 1.8.11 Description The issue is related to an integer signedness error in the GetBlockHeadersMsg handler of the LES protocol implementation, which can lead to an access violation. This allows attackers to launch a Denial...