CVE-2024-32972
go-ethereum denial of service via malicious p2p message
Résumé
go-ethereum denial of service via malicious p2p message
Description d'origine
La description telle que publiée par la source (souvent en anglais).
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version 1.13.15 and onwards.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com