Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-32972

go-ethereum denial of service via malicious p2p message

Description

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version `1.13.15` and onwards.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ethereum go-ethereum

  • < 1.13.15affected

References