CVE-2024-32972: falha de alta gravidade em ethereum go-ethereum
go-ethereum denial of service via malicious p2p message
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.8%
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version `1.13.15` and onwards.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
ethereum · go-ethereumCVEs relacionadas — ethereum go-ethereum
No mesmo produto, das mais perigosas para as menos.
CVE-2020-26264MEDIUMLES Server DoS via GetProofsV2EPSS 1.9%CVE-2020-26240MEDIUMErroneous Proof of Work calculation in gethEPSS 1.9%CVE-2020-26242MEDIUMDenial of service in gethEPSS 1.5%CVE-2021-39137MEDIUMConsensus flaw during block processing in go-ethereumEPSS 1.3%CVE-2021-41173MEDIUMDoS via maliciously crafted p2p messageEPSS 1.2%CVE-2020-26241MEDIUMShallow copy bug in gethEPSS 1.2%