high7.5
CVE-2018-19184
Go Ethereum Denial of Service
Impact
`cmd/evm/runner.go` in Go Ethereum (aka geth) allows attackers to cause a denial of service (SEGV) via crafted bytecode. ### Specific Go Packages Affected github.com/ethereum/go-ethereum/cmd/evm
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/ethereum/go-ethereum | < 1.8.14 | 1.8.14 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethereum | Go Ethereum | Version 1.8.17 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/ethereum/go-ethereum/issues/18069
- https://github.com/advisories/GHSA-9h4h-8w5p-f28w
- https://nvd.nist.gov/vuln/detail/CVE-2018-19184
- https://github.com/ethereum/go-ethereum/commit/83e2761c3a13524bd5d6597ac08994488cf872ef
- https://github.com/ethereum/go-ethereum/commit/fb9f7261ec51e38eedb454594fc19f00de1a6834