What is GHSA-9h4h-8w5p-f28w?

GHSA-9h4h-8w5p-f28w is a security advisory published by GitHub Security Advisories with High severity. Go Ethereum Denial of Service

Which CVE IDs does GHSA-9h4h-8w5p-f28w cover?

GHSA-9h4h-8w5p-f28w covers the following CVE IDs: CVE-2018-19184. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9h4h-8w5p-f28w?

GHSA-9h4h-8w5p-f28w has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-9h4h-8w5p-f28w?

GHSA-9h4h-8w5p-f28w affects 1 product, including: go/github.com/ethereum/go-ethereum:\u003c 1.8.14.

GHSA-9h4h-8w5p-f28wHighCVSS 7.5

Go Ethereum Denial of Service

Vendor

GitHub Security Advisories

Published

June 29, 2021

Last Modified

October 2, 2023

🔗 CVE IDs covered (1)

CVE-2018-19184 →

📋 Description

cmd/evm/runner.go in Go Ethereum (aka geth) allows attackers to cause a denial of service (SEGV) via crafted bytecode.

Specific Go Packages Affected

github.com/ethereum/go-ethereum/cmd/evm

🎯 Affected products1

go/github.com/ethereum/go-ethereum:< 1.8.14

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-19184
https://github.com/ethereum/go-ethereum/issues/18069
https://github.com/ethereum/go-ethereum/commit/83e2761c3a13524bd5d6597ac08994488cf872ef
https://github.com/ethereum/go-ethereum/commit/fb9f7261ec51e38eedb454594fc19f00de1a6834
https://github.com/advisories/GHSA-9h4h-8w5p-f28w