CVE-2022-29177

Katalog CVE

CVSS 5.9 · Medium EPSS 1,2%

Kerentanan Uncontrolled Resource Consumption pada go ethereum. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that addresses the problem. As a workaround, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.

Rincian

Terbit di NVD

20 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ethereum/go-ethereum/pull/24507 patch · advisory pihak ketiga
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-wjxw-gh3m-7pm5 patch · advisory pihak ketiga