https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T00:43:47.771347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-06542 cnvd-2021-06542 2026-10-19T00:43:47.835109+00:00 cnvd-2021-06542 https://cve.radiocsirt.org/vuln/euvd-2026-46043 EUVD-2026-46043 2026-10-19T00:43:47.835167+00:00 EUVD-2026-46043 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26264 fkie_cve-2020-26264 2026-10-19T00:43:47.835182+00:00

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetProofsV2 request from a connected LES client. This vulnerability only concerns users explicitly enabling les server; disabling les prevents the exploit. The vulnerability was patched in version 1.9.25.

 https://cve.radiocsirt.org/vuln/ghsa-r33q-22hv-j29q GHSA-r33q-22hv-j29q — Denial of service in github.com/ethereum/go-ethereum 2026-10-19T00:43:47.835222+00:00

Affected: Go: github.com/ethereum/go-ethereum

### Impact

A DoS vulnerability can make a LES server crash via malicious `GetProofsV2` request from a connected LES client.

### Patches

The vulnerability was patched in https://github.com/ethereum/go-ethereum/pull/21896.

### Workarounds

This vulnerability only concerns users explicitly enabling `les` server; disabling `les` prevents the exploit. It can also be patched by manually applying the patch in https://github.com/ethereum/go-ethereum/pull/21896.

### For more information If you have any questions or comments about this advisory: * Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum) * Email us at [security@ethereum.org](mailto:security@ethereum.org)

 https://cve.radiocsirt.org/vuln/gsd-2020-26264 gsd-2020-26264 2026-10-19T00:43:47.835254+00:00 gsd-2020-26264