Most recent entries from all

EUVD-2026-234118

2026-10-02T15:29:42.274538+00:00

EUVD-2026-234118

fkie_cve-2022-29177

2026-10-02T15:29:42.274571+00:00

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that addresses the problem. As a workaround, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.

GHSA-wjxw-gh3m-7pm5 — DoS via malicious p2p message in Go Ethereum

2026-10-02T15:29:42.274604+00:00

Affected: Go: github.com/ethereum/go-ethereum

### Impact

A vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node.

### Patches

The following PR addresses the problem: https://github.com/ethereum/go-ethereum/pull/24507

### Workarounds

Aside from applying the PR linked above, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.

### Credits

This bug was reported by `nrv` via bounty@ethereum.org, who has gracefully requested that the bounty rewards be donated to Médecins sans frontières.

### For more information If you have any questions or comments about this advisory: * Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum)

gsd-2022-29177

2026-10-02T15:29:42.274639+00:00

gsd-2022-29177

openSUSE-SU-2025:15424-1 — govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media

2026-10-02T15:29:42.274652+00:00

govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media