logo

Database

Lack of data validation In github.com/ethereum/go-ethereum

Description

go-ethereum is vulnerable to DoS via malicious p2p message affecting a vulnerable node Impact

A vulnerable node can be forced to shutdown/crash using a specially crafted message. More details to be released later.

Credit

This issue was reported to the Ethereum Foundation Bug Bounty Program by DELENE TCHIO ROMUALD.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-228622. NVD-2026-228623. OSV-2026-228624. GHSA-mr7q-c9w9-wh4h5. GCVE-2026-22862

References

1. https://github.com/ethereum/go-ethereum/security/advisories/GHSA-mr7q-c9w9-wh4h2. https://github.com/ethereum/go-ethereum/commit/abeb78c647e354ed922726a1d719ac7bc64a07e23. https://github.com/qzhodl/CVE-2026-22862

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-12Z87 – Vulnerability | Fluid Attacks Database