Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-39137

Consensus flaw during block processing in go-ethereum

Description

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ethereum go-ethereum

  • >= 1.10.0, < 1.10.8affected

References