CVE-2021-43668 — NULL Pointer Dereference in Ethereum Go-ethereum

CWE-476 — NULL Pointer Dereference5 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 82.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Github.com Ethereum Go-ethereumEthereum GO Ethereum
Timeline
PublishedNov 18
Latest updateNov 23

Description

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

4
GHSA
Denial of Service in Go-Ethereum↗2021-11-23
▶
OSV
Denial of Service in Go-Ethereum↗2021-11-23
▶
OSV
CVE-2021-43668: Go-Ethereum 1↗2021-11-18
▶
CVEList
CVE-2021-43668: Go-Ethereum 1↗2021-11-18
▶
CVE-2021-43668 — NULL Pointer Dereference | cvebase