PT-2026-20348 · Unknown · Go-Ethereum
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
go-ethereum (geth) versions prior to 1.16.9
Description
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shut down or crash remotely without requiring login through the use of a specially crafted malicious p2p message.
Recommendations
Update to version 1.16.9 or 1.17.0 and regenerate the node key.
Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Go-Ethereum