QwikSec

Security Database

CVE

CWE

Training

CVE-2021-41173

Published: Oct 26, 2021

Modified: Aug 4, 2024

PUBLISHED

CVSS v3.1

5.7

MEDIUM

Description

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.

Vendor	Product	Versions
ethereum	go-ethereum	affected `< 1.10.9`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v

x_refsource_CONFIRM

https://github.com/ethereum/go-ethereum/pull/23801

x_refsource_MISC

https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738

x_refsource_MISC

https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.