CVE-2020-26264

Katalog CVE

CVSS 6.5 · Medium EPSS 1,9%

Kerentanan Uncontrolled Resource Consumption pada go ethereum. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetProofsV2 request from a connected LES client. This vulnerability only concerns users explicitly enabling les server; disabling les prevents the exploit. The vulnerability was patched in version 1.9.25.

Rincian

Terbit di NVD

11 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 78,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ethereum/go-ethereum/commit/bddd103a9f0af27ef533f04e06ea429cf76b6d46 patch · advisory pihak ketiga
• https://github.com/ethereum/go-ethereum/pull/21896 patch · advisory pihak ketiga
• https://github.com/ethereum/go-ethereum/releases/tag/v1.9.25 advisory pihak ketiga
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-r33q-22hv-j29q advisory pihak ketiga