← Back

Go Ethereum

go_ethereum

Vendor: Ethereum • 24 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20421
1Ethereum
1Go Ethereum
Nov 21, 2024
Dec 24, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index...Show more
Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.Show less
CVE-2018-19184
1Ethereum
1Go Ethereum
Nov 21, 2024
Nov 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
CVE-2018-16733
1Ethereum
1Go Ethereum
Nov 21, 2024
Sep 8, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.
CVE-2018-12018
1Ethereum
1Go Ethereum
Nov 21, 2024
Jul 5, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers...Show more
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip value. The vulnerable remote node would be crashed by such an attack immediately, aka the EPoD (Ethereum Packet of Death) issue.Show less