Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2022/08/06 12:00 a.m.•45 views

GHSA-RQMG-HRG4-FM69 Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks

Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...

5.9CVSS6.2AI score0.01271EPSS
SaveExploits1References6
Prion
Prion
•added 2022/08/05 9:15 p.m.•36 views

Design/Logic Flaw

Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...

2.6CVSS5.7AI score0.01271EPSS
SaveExploits1References4Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2022/01/03 12:00 a.m.•15 views

VulnCheck KEV: CVE-2022-37450

Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...

5.9CVSS6.2AI score0.01271EPSS
SaveIn wildExploits1References3
Rows per page
Query Builder