CVE-2021-42219 — Uncontrolled Resource Consumption in Ethereum Go-ethereum

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 37.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Github.com Ethereum Go-ethereumEthereum GO Ethereum
Timeline
PublishedMar 17
Latest updateMar 18

Description

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

3
OSV
Denial of service in go-ethereum↗2022-03-18
▶
GHSA
Denial of service in go-ethereum↗2022-03-18
▶
CVEList
CVE-2021-42219: Go-Ethereum v1↗2022-03-16
▶
CVE-2021-42219 — Uncontrolled Resource Consumption | cvebase