https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:15:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-234118 EUVD-2026-234118 https://cve.radiocsirt.org/vuln/euvd-2026-234118 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29177 <p>Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that addresses the problem. As a workaround, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.</p> <p>Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that addresses the problem. As a workaround, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-29177 https://cve.radiocsirt.org/vuln/ghsa-wjxw-gh3m-7pm5 <p><strong>Affected:</strong> Go: github.com/ethereum/go-ethereum</p> <p>### Impact</p> <p>A vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node.</p> <p>### Patches</p> <p>The following PR addresses the problem: https://github.com/ethereum/go-ethereum/pull/24507</p> <p>### Workarounds</p> <p>Aside from applying the PR linked above, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.</p> <p>### Credits</p> <p>This bug was reported by `nrv` via bounty@ethereum.org, who has gracefully requested that the bounty rewards be donated to Médecins sans frontières.</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum)</p> <p><strong>Affected:</strong> Go: github.com/ethereum/go-ethereum</p> <p>### Impact</p> <p>A vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node.</p> <p>### Patches</p> <p>The following PR addresses the problem: https://github.com/ethereum/go-ethereum/pull/24507</p> <p>### Workarounds</p> <p>Aside from applying the PR linked above, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.</p> <p>### Credits</p> <p>This bug was reported by `nrv` via bounty@ethereum.org, who has gracefully requested that the bounty rewards be donated to Médecins sans frontières.</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum)</p> https://cve.radiocsirt.org/vuln/ghsa-wjxw-gh3m-7pm5 https://cve.radiocsirt.org/vuln/gsd-2022-29177 gsd-2022-29177 https://cve.radiocsirt.org/vuln/gsd-2022-29177 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15424-1 <p>govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15424-1