What is GHSA-pvx3-gm3c-gmpr?

GHSA-pvx3-gm3c-gmpr is a security advisory published by GitHub Security Advisories with High severity. Denial of Service in Go-Ethereum

Which CVE IDs does GHSA-pvx3-gm3c-gmpr cover?

GHSA-pvx3-gm3c-gmpr covers the following CVE IDs: CVE-2022-23327. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pvx3-gm3c-gmpr?

GHSA-pvx3-gm3c-gmpr has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-pvx3-gm3c-gmpr?

GHSA-pvx3-gm3c-gmpr affects 1 product, including: go/github.com/ethereum/go-ethereum:\u003c= 1.10.12.

GHSA-pvx3-gm3c-gmprHighCVSS 7.5

Denial of Service in Go-Ethereum

Vendor

GitHub Security Advisories

Published

March 5, 2022

Last Modified

September 2, 2026

🔗 CVE IDs covered (1)

CVE-2022-23327 →

📋 Description

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).

🎯 Affected products1

go/github.com/ethereum/go-ethereum:<= 1.10.12

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-23327
https://dl.acm.org/doi/pdf/10.1145/3460120.3485369
https://tristartom.github.io/docs/ccs21.pdf
https://nrdax.com/techniques/NRDAX-T0156-mempool-pending-eviction-flood
https://github.com/advisories/GHSA-pvx3-gm3c-gmpr