Most recent entries from all

cnvd-2021-06542

EUVD-2026-46043

fkie_cve-2020-26264

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetProofsV2 request from a connected LES client. This vulnerability only concerns users explicitly enabling les server; disabling les prevents the exploit. The vulnerability was patched in version 1.9.25.

GHSA-r33q-22hv-j29q — Denial of service in github.com/ethereum/go-ethereum

Affected: Go: github.com/ethereum/go-ethereum

### Impact

A DoS vulnerability can make a LES server crash via malicious `GetProofsV2` request from a connected LES client.

### Patches

The vulnerability was patched in https://github.com/ethereum/go-ethereum/pull/21896.

### Workarounds

This vulnerability only concerns users explicitly enabling `les` server; disabling `les` prevents the exploit. It can also be patched by manually applying the patch in https://github.com/ethereum/go-ethereum/pull/21896.

### For more information If you have any questions or comments about this advisory: * Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum) * Email us at [security@ethereum.org](mailto:security@ethereum.org)

Most recent entries from all

cnvd-2021-06542

EUVD-2026-46043

fkie_cve-2020-26264

GHSA-r33q-22hv-j29q — Denial of service in github.com/ethereum/go-ethereum

gsd-2020-26264