high7.5
CVE-2022-23327
Denial of Service in Go-Ethereum
Impact
A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/ethereum/go-ethereum | <= 1.10.12 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethereum | Go Ethereum | through 1.10.12 |