CVE-2021-42219

Name of the Vulnerable Software and Affected Versions Go-Ethereum version 1.10.9

Description The issue allows attackers to cause a denial of service (DoS) by sending an excessive amount of messages to a node, due to missing memory in the component /ethash/algorithm.go.

Recommendations For Go-Ethereum version 1.10.9, consider restricting access to the /ethash/algorithm.go component to minimize the risk of exploitation. As a temporary workaround, limit the amount of messages that can be sent to a node to prevent a denial of service. At the moment, there is no information about a newer version that contains a fix for this issue.