Description
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.
References (4)
Core 4
Core References
Third Party Advisory x_refsource_confirm
https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v
Patch, Third Party Advisory x_refsource_misc
https://github.com/ethereum/go-ethereum/pull/23801
Patch, Third Party Advisory x_refsource_misc
https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9
Scores
CVSS v3
5.7
EPSS
0.0018
EPSS Percentile
38.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (2)
ethereum/go-ethereum
0 - 1.10.9Go
ethereum/go_ethereum
< 1.10.9
Published
Oct 26, 2021
Tracked Since
Feb 18, 2026