https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:32:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05814 bdu:2022-05814 https://cve.radiocsirt.org/vuln/bdu:2022-05814 https://cve.radiocsirt.org/vuln/euvd-2026-30435 EUVD-2026-30435 https://cve.radiocsirt.org/vuln/euvd-2026-30435 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39137 <p>go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.</p> <p>go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39137 https://cve.radiocsirt.org/vuln/ghsa-9856-9gg9-qcmq <p><strong>Affected:</strong> Go: github.com/ethereum/go-ethereum</p> <p>### Impact</p> <p>A vulnerability in the Geth EVM could cause a node to reject the canonical chain.</p> <p>### Description</p> <p>A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different `stateRoot` when processing a maliciously crafted transaction. This, in turn, would lead to the chain being split in two forks.</p> <p>All Geth versions supporting the London hard fork are vulnerable (which predates London), so all users should update.</p> <p>This bug was exploited on Mainnet at block 13107518, leading to a minority chain split.</p> <p>### Patches</p> <p>A patch is included in the `v1.10.8` release. The exact patch to fix the issue is contained within this [commit](https://github.com/ethereum/go-ethereum/pull/23381/commits/4d4879cafd1b3c906fc184a8c4a357137465128f)</p> <p>### Workarounds</p> <p>No workarounds exist, save to update and/or apply the patch commit.</p> <p>### References.</p> <p>Post-mortem [write-up](https://github.com/ethereum/go-ethereum/blob/master/docs/postmortems/2021-08-22-split-postmortem.md).</p> <p>### Credits</p> <p>The bug was found by @guidovranken (working for [Sentnl](https://sentnl.io/) during an audit of the [Telos EVM](https://www.telos.net/evm)) and reported via bounty@ethereum.org.</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>* Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum/) * Email us at [security@ethereum.org](mailto:security@ethereum.org)</p> <p><strong>Affected:</strong> Go: github.com/ethereum/go-ethereum</p> <p>### Impact</p> <p>A vulnerability in the Geth EVM could cause a node to reject the canonical chain.</p> <p>### Description</p> <p>A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different `stateRoot` when processing a maliciously crafted transaction. This, in turn, would lead to the chain being split in two forks.</p> <p>All Geth versions supporting the London hard fork are vulnerable (which predates London), so all users should update.</p> <p>This bug was exploited on Mainnet at block 13107518, leading to a minority chain split.</p> <p>### Patches</p> <p>A patch is included in the `v1.10.8` release. The exact patch to fix the issue is contained within this [commit](https://github.com/ethereum/go-ethereum/pull/23381/commits/4d4879cafd1b3c906fc184a8c4a357137465128f)</p> <p>### Workarounds</p> <p>No workarounds exist, save to update and/or apply the patch commit.</p> <p>### References.</p> <p>Post-mortem [write-up](https://github.com/ethereum/go-ethereum/blob/master/docs/postmortems/2021-08-22-split-postmortem.md).</p> <p>### Credits</p> <p>The bug was found by @guidovranken (working for [Sentnl](https://sentnl.io/) during an audit of the [Telos EVM](https://www.telos.net/evm)) and reported via bounty@ethereum.org.</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>* Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum/) * Email us at [security@ethereum.org](mailto:security@ethereum.org)</p> https://cve.radiocsirt.org/vuln/ghsa-9856-9gg9-qcmq https://cve.radiocsirt.org/vuln/gsd-2021-39137 gsd-2021-39137 https://cve.radiocsirt.org/vuln/gsd-2021-39137