https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 20:30:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-188806 EUVD-2026-188806 https://cve.radiocsirt.org/vuln/euvd-2026-188806 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40591 <p>go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40591 https://cve.radiocsirt.org/vuln/ghsa-ppjg-v974-84cm <p><strong>Affected:</strong> Go: github.com/ethereum/go-ethereum</p> <p>### Impact</p> <p>A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node.</p> <p>### Details</p> <p>The p2p handler spawned a new goroutine to respond to `ping` requests. By flooding a node with ping requests, an unbounded number of goroutines can be created, leading to resource exhaustion and potentially crash due to OOM.</p> <p>### Patches</p> <p>The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards.</p> <p>Fixed by https://github.com/ethereum/go-ethereum/pull/27887</p> <p>### Workarounds</p> <p>No known workarounds.</p> <p>### Credits</p> <p>This bug was reported by Patrick McHardy and reported via [bounty@ethereum.org](mailto:bounty@ethereum.org).</p> <p>### References</p> <p><strong>Affected:</strong> Go: github.com/ethereum/go-ethereum</p> <p>### Impact</p> <p>A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node.</p> <p>### Details</p> <p>The p2p handler spawned a new goroutine to respond to `ping` requests. By flooding a node with ping requests, an unbounded number of goroutines can be created, leading to resource exhaustion and potentially crash due to OOM.</p> <p>### Patches</p> <p>The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards.</p> <p>Fixed by https://github.com/ethereum/go-ethereum/pull/27887</p> <p>### Workarounds</p> <p>No known workarounds.</p> <p>### Credits</p> <p>This bug was reported by Patrick McHardy and reported via [bounty@ethereum.org](mailto:bounty@ethereum.org).</p> <p>### References</p> https://cve.radiocsirt.org/vuln/ghsa-ppjg-v974-84cm https://cve.radiocsirt.org/vuln/gsd-2023-40591 gsd-2023-40591 https://cve.radiocsirt.org/vuln/gsd-2023-40591