Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-26240 EUVD-2021-1406GHSA-v592-xf75-856pGO-2022-0775

Erroneous Proof of Work calculation in geth

Published Nov 25, 2020 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected. This issue is fixed as of 1.9.24

Affected products

VendorProductAffectedFixed
ethereum go-ethereum < 1.9.24 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250807T150727-1.1 openSUSE-SU-2025:15424-1

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/ethereum/go-ethereum < 1.9.24 1.9.24 GHSA-v592-xf75-856p

Advisories 1

References