CVE-2018-19184

HIGH7.5EPSS 0.42%

Go Ethereum Denial of Service

發布日:2021/6/29修改日:2024/8/21

也稱為:GHSA-9h4h-8w5p-f28wGO-2022-0814

描述

`cmd/evm/runner.go` in Go Ethereum (aka geth) allows attackers to cause a denial of service (SEGV) via crafted bytecode. ### Specific Go Packages Affected github.com/ethereum/go-ethereum/cmd/evm

受影響套件(2)

Go/github.com/ethereum/go-ethereumfrom 0, < 1.8.14
Go/github.com/ethereum/go-ethereumfrom 0, < 1.8.14

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(5)

ADVISORYhttps://github.com/advisories/GHSA-9h4h-8w5p-f28w
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-19184
WEBhttps://github.com/ethereum/go-ethereum/commit/83e2761c3a13524bd5d6597ac08994488cf872ef
WEBhttps://github.com/ethereum/go-ethereum/commit/fb9f7261ec51e38eedb454594fc19f00de1a6834
WEBhttps://github.com/ethereum/go-ethereum/issues/18069