medium5.3
CVE-2020-26265
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.
Impact
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade release version 1.9.20. No individual workaround patches have been made -- all users are recommended to upgrade to a newer version.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethereum | Go Ethereum | from 1.9.4 before 1.9.20 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ethereum/go-ethereum/releases/tag/v1.9.20
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-xw37-57qp-9mm4
- https://github.com/ethereum/go-ethereum/releases/tag/v1.9.20
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-xw37-57qp-9mm4