Denial Of Service (DOS)

github.com/ethereum/go-ethereum is vulnerable to Denial of Service. This vulnerability exists when --http --graphql is used which allows an attacker to cause an application crash via a crafted GraphQL query. NOTE: the vendor’s position is that the "graphql endpoint [is not] designed to withstand attacks by hostile clients, nor handle huge amounts of clients/traffic.