CVE-2018-19184

HIGH7.5EPSS 0.42%

Go Ethereum Denial of Service

Published: 6/29/2021Modified: 8/21/2024

Also known as:GHSA-9h4h-8w5p-f28wGO-2022-0814

Description

`cmd/evm/runner.go` in Go Ethereum (aka geth) allows attackers to cause a denial of service (SEGV) via crafted bytecode. ### Specific Go Packages Affected github.com/ethereum/go-ethereum/cmd/evm

Affected packages (2)

Go/github.com/ethereum/go-ethereumfrom 0, < 1.8.14
Go/github.com/ethereum/go-ethereumfrom 0, < 1.8.14

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (5)

ADVISORYhttps://github.com/advisories/GHSA-9h4h-8w5p-f28w
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-19184
WEBhttps://github.com/ethereum/go-ethereum/commit/83e2761c3a13524bd5d6597ac08994488cf872ef
WEBhttps://github.com/ethereum/go-ethereum/commit/fb9f7261ec51e38eedb454594fc19f00de1a6834
WEBhttps://github.com/ethereum/go-ethereum/issues/18069