logo

Database

Asymmetric denial of service In github.com/ethereum/go-ethereum

Description

Go Ethereum Denial of Service cmd/evm/runner.go in Go Ethereum (aka geth) allows attackers to cause a denial of service (SEGV) via crafted bytecode.

Specific Go Packages Affected

github.com/ethereum/go-ethereum/cmd/evm

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2018-191842. NVD-2018-191843. OSV-2018-191844. GHSA-9h4h-8w5p-f28w5. GCVE-2018-19184

References

1. https://github.com/ethereum/go-ethereum/issues/180692. https://github.com/ethereum/go-ethereum/commit/83e2761c3a13524bd5d6597ac08994488cf872ef3. https://github.com/ethereum/go-ethereum/commit/fb9f7261ec51e38eedb454594fc19f00de1a6834

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.