What is GHSA-5m8f-chrv-7rw5?

GHSA-5m8f-chrv-7rw5 is a security advisory published by GitHub Security Advisories with Medium severity. Denial of Service in Go-Ethereum

Which CVE IDs does GHSA-5m8f-chrv-7rw5 cover?

GHSA-5m8f-chrv-7rw5 covers the following CVE IDs: CVE-2021-43668. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5m8f-chrv-7rw5?

GHSA-5m8f-chrv-7rw5 has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-5m8f-chrv-7rw5?

GHSA-5m8f-chrv-7rw5 affects 1 product, including: go/github.com/ethereum/go-ethereum:\u003c= 1.10.9.

GHSA-5m8f-chrv-7rw5MediumCVSS 5.5

Denial of Service in Go-Ethereum

Vendor

GitHub Security Advisories

Published

November 23, 2021

Last Modified

September 18, 2023

🔗 CVE IDs covered (1)

CVE-2021-43668 →

📋 Description

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal.

🎯 Affected products1

go/github.com/ethereum/go-ethereum:<= 1.10.9

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-43668
https://github.com/ethereum/go-ethereum/issues/23866
https://github.com/syndtr/goleveldb/issues/373
https://github.com/advisories/GHSA-5m8f-chrv-7rw5