← Zuruck zu CVEs

CVE-2024-32972

HIGH

7.5

Beschreibung

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version `1.13.15` and onwards.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht5/6/2024

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-400

Referenzen

https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15(security-advisories@github.com)

https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652(security-advisories@github.com)

https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.