Description
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ethereum | go-ethereum | < 1.10.9 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/ethereum/go-ethereum | < 1.10.9 | 1.10.9 | GHSA-59hh-656j-3p7v |