{"id":"CVE-2024-32972","state":"PUBLISHED","title":"go-ethereum denial of service via malicious p2p message","description":"go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version `1.13.15` and onwards.","publishedAt":"2024-05-06T14:26:19.510Z","updatedAt":"2024-08-02T02:27:53.323Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"GitHub_M"},"assigner":"GitHub_M","products":["ethereum go-ethereum"],"affected":[{"vendor":"ethereum","product":"go-ethereum","versions":[{"version":"< 1.13.15","status":"affected"}]}],"references":["https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652","https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/32xxx/CVE-2024-32972.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-32972","state":"PUBLISHED","datePublished":"2024-05-06T14:26:19.510Z","dateUpdated":"2024-08-02T02:27:53.323Z","assignerShortName":"GitHub_M","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateReserved":"2024-04-22T15:14:59.165Z"},"containers":{"cna":{"title":"go-ethereum denial of service via malicious p2p message","descriptions":[{"lang":"en","value":"go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version `1.13.15` and onwards."}],"affected":[{"vendor":"ethereum","product":"go-ethereum","versions":[{"version":"< 1.13.15","status":"affected"}]}],"references":[{"url":"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652","name":"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15","name":"https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","lang":"en","description":"CWE-400: Uncontrolled Resource Consumption","type":"CWE"}]}],"providerMetadata":{"shortName":"GitHub_M","orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateUpdated":"2024-05-06T14:26:19.510Z"},"source":{"advisory":"GHSA-4xc9-8hmq-j652","discovery":"UNKNOWN"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"ethereum","product":"go_ethereum","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"1.13.15","versionType":"custom"}],"cpes":["cpe:2.3:a:ethereum:go_ethereum:-:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-32972","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-09T19:07:59.118874Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:50:49.796Z"}},{"title":"CVE Program Container","references":[{"url":"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652","name":"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15","name":"https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T02:27:53.323Z"}}]}}}