CVE-2020-26240: falha de média gravidade em ethereum go-ethereum
Erroneous Proof of Work calculation in geth
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 1.9%
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected. This issue is fixed as of 1.9.24
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Produtos afetados
ethereum · go-ethereumCVEs relacionadas — ethereum go-ethereum
No mesmo produto, das mais perigosas para as menos.
CVE-2020-26264MEDIUMLES Server DoS via GetProofsV2EPSS 1.9%CVE-2020-26242MEDIUMDenial of service in gethEPSS 1.5%CVE-2021-39137MEDIUMConsensus flaw during block processing in go-ethereumEPSS 1.3%CVE-2021-41173MEDIUMDoS via maliciously crafted p2p messageEPSS 1.2%CVE-2020-26241MEDIUMShallow copy bug in gethEPSS 1.2%CVE-2022-29177MEDIUMDoS via malicious p2p message in Go-EthereumEPSS 1.2%