github.com/ethereum/go-ethereum (Go)
Advisories
45
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.17.0 or later clears every advisory below that has a fix.
Upgrade commands
go
go get github.com/ethereum/go-ethereum@v1.17.0 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-m6j8-rg6r-7mv8 Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake |
High EPSS 0.51% |
< 1.16.9 | 1.16.9 |
| GHSA-m6j8-rg6r-7mv8 Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake |
High EPSS 0.51% |
< 1.16.9 | 1.16.9 |
| GHSA-2gjw-fg97-vg3r Go Ethereum affected by DoS via malicious p2p message |
High EPSS 0.66% |
< 1.16.9 | 1.16.9 |
| GHSA-2gjw-fg97-vg3r Go Ethereum affected by DoS via malicious p2p message |
High EPSS 0.66% |
< 1.16.9 | 1.16.9 |
| GHSA-689v-6xwf-5jf3 Go Ethereum affected by DoS via malicious p2p message |
High EPSS 0.65% |
< 1.17.0 | 1.17.0 |
| GHSA-689v-6xwf-5jf3 Go Ethereum affected by DoS via malicious p2p message |
High EPSS 0.65% |
< 1.17.0 | 1.17.0 |
| GHSA-mq3p-rrmp-79jg go-ethereum is vulnerable to high CPU usage leading to DoS via malicious p2p message |
High EPSS 0.62% |
< 1.16.8 | 1.16.8 |
| GHSA-mq3p-rrmp-79jg go-ethereum is vulnerable to high CPU usage leading to DoS via malicious p2p message |
High EPSS 0.62% |
< 1.16.8 | 1.16.8 |
| GHSA-mr7q-c9w9-wh4h go-ethereum is vulnerable to DoS via malicious p2p message affecting a vulnerable node |
High EPSS 0.73% |
< 1.16.8 | 1.16.8 |
| GHSA-mr7q-c9w9-wh4h go-ethereum is vulnerable to DoS via malicious p2p message affecting a vulnerable node |
High EPSS 0.73% |
< 1.16.8 | 1.16.8 |
| GHSA-q26p-9cq4-7fc2 Go Ethereum vulnerable to DoS via malicious p2p message |
Medium EPSS 0.69% |
>= 1.14.0, < 1.14.13 | 1.14.13 |
| GHSA-q26p-9cq4-7fc2 Go Ethereum vulnerable to DoS via malicious p2p message |
Medium EPSS 0.69% |
>= 1.14.0, < 1.14.13 | 1.14.13 |
| GHSA-4xc9-8hmq-j652 go-ethereum vulnerable to DoS via malicious p2p message |
High EPSS 0.85% |
< 1.13.15 | 1.13.15 |
| GHSA-4xc9-8hmq-j652 go-ethereum vulnerable to DoS via malicious p2p message |
High EPSS 0.85% |
< 1.13.15 | 1.13.15 |
| GHSA-v9jh-j8px-98vq go-ethereum vulnerable to denial of service via crafted GraphQL query |
High EPSS 1.18% |
<= 1.13.4 | No fix yet |
| GHSA-ppjg-v974-84cm Go-Ethereum vulnerable to denial of service via malicious p2p message |
High EPSS 1.12% |
< 1.12.1 | 1.12.1 |
| GHSA-ppjg-v974-84cm Go-Ethereum vulnerable to denial of service via malicious p2p message |
High EPSS 1.12% |
< 1.12.1-stable | 1.12.1-stable |
| GHSA-rqmg-hrg4-fm69 Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks |
Medium EPSS 1.27% |
<= 1.10.21 | No fix yet |
| GHSA-wjxw-gh3m-7pm5 DoS via malicious p2p message in Go Ethereum |
Medium EPSS 1.16% |
< 1.10.17 | 1.10.17 |
| GHSA-wjxw-gh3m-7pm5 DoS via malicious p2p message in Go Ethereum |
Medium EPSS 1.16% |
< 1.10.17 | 1.10.17 |
| GHSA-vrcc-g6vj-mh5w Denial of service in go-ethereum |
High EPSS 1.20% |
<= 1.10.9 | No fix yet |
| GHSA-pvx3-gm3c-gmpr Denial of Service in Go-Ethereum |
High EPSS 1.37% |
<= 1.10.12 | No fix yet |
| GHSA-vmf7-hmh6-vv57 Denial of Service in Go-Ethereum |
High EPSS 1.37% |
<= 1.10.16 | No fix yet |
| GHSA-5m8f-chrv-7rw5 Denial of Service in Go-Ethereum |
Medium EPSS 0.26% |
<= 1.10.9 | No fix yet |
| GHSA-59hh-656j-3p7v Geth Node Vulnerable to DoS via maliciously crafted p2p message |
Medium EPSS 1.24% |
< 1.10.9 | 1.10.9 |
| GHSA-59hh-656j-3p7v Geth Node Vulnerable to DoS via maliciously crafted p2p message |
Medium EPSS 1.24% |
< 1.10.9 | 1.10.9 |
| GHSA-9856-9gg9-qcmq Ethereum Contains Consensus Flaw During Block Processing |
Medium EPSS 1.32% |
>= 1.10.0, < 1.10.8 | 1.10.8 |
| GHSA-9856-9gg9-qcmq Ethereum Contains Consensus Flaw During Block Processing |
Medium EPSS 1.32% |
< 1.10.8 | 1.10.8 |
| GHSA-9h4h-8w5p-f28w Go Ethereum Denial of Service |
High EPSS 1.47% |
< 1.8.14 | 1.8.14 |
| GHSA-9h4h-8w5p-f28w Go Ethereum Denial of Service |
High EPSS 1.47% |
< 1.8.14 | 1.8.14 |
| GHSA-xw37-57qp-9mm4 Consensus flaw during block processing in github.com/ethereum/go-ethereum |
Medium EPSS 0.92% |
>= 1.9.4, < 1.9.20 | 1.9.20 |
| GHSA-xw37-57qp-9mm4 Consensus flaw during block processing in github.com/ethereum/go-ethereum |
Medium EPSS 0.92% |
>= 1.9.4, < 1.9.20 | 1.9.20 |
| GHSA-m6gx-rhvj-fh52 Denial of service in go-ethereum due to CVE-2020-28362 |
Critical | < 1.9.24 | 1.9.24 |
| GHSA-m6gx-rhvj-fh52 Denial of service in go-ethereum due to CVE-2020-28362 |
Critical | < 1.9.24 | 1.9.24 |
| GHSA-jm5c-rv3w-w83m Denial of service in geth |
Medium EPSS 1.48% |
>= 1.9.16, < 1.9.18 | 1.9.18 |
| GHSA-69v6-xc2j-r2jf Shallow copy bug in geth |
Medium EPSS 1.23% |
>= 1.9.7, < 1.9.17 | 1.9.17 |
| GHSA-69v6-xc2j-r2jf Shallow copy bug in geth |
Medium EPSS 1.23% |
>= 1.9.7, < 1.9.17 | 1.9.17 |
| GHSA-v592-xf75-856p Erroneous Proof of Work calculation in geth |
Medium EPSS 1.86% |
< 1.9.24 | 1.9.24 |
| GHSA-v592-xf75-856p Erroneous Proof of Work calculation in geth |
Medium EPSS 1.86% |
< 1.9.24 | 1.9.24 |
| GHSA-qr2j-wrhx-4829 Go Ethereum Improper Input Validation |
High EPSS 1.21% |
< 1.8.14 | 1.8.14 |
| GHSA-qr2j-wrhx-4829 Go Ethereum Improper Input Validation |
High EPSS 1.21% |
< 1.8.14 | 1.8.14 |
| GHSA-r33q-22hv-j29q Denial of service in github.com/ethereum/go-ethereum |
Medium EPSS 1.89% |
< 1.9.25 | 1.9.25 |
| GHSA-p5gc-957x-gfw9 Go Ethereum LES protocol implementation vulnerable to Denial of Service |
High EPSS 4.25% |
< 1.8.11 | 1.8.11 |
| GHSA-p5gc-957x-gfw9 Go Ethereum LES protocol implementation vulnerable to Denial of Service |
High EPSS 4.25% |
< 1.8.11 | 1.8.11 |
| GHSA-r33q-22hv-j29q Denial of service in github.com/ethereum/go-ethereum |
Medium EPSS 1.89% |
< 1.9.25 | 1.9.25 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor