Skip to content
OpenAdvisories
Unscored CVE-2018-20421 EUVD-2018-12978GHSA-5g4w-3m99-4m2p

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array…

Published Dec 24, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.

References