Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-26313

Go Ethereum affected by DoS via malicious p2p message

Description

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory usage by sending a specially-crafted p2p message. The issue is resolved in the v1.17.0 release.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ethereum go-ethereum

  • < 1.17.0affected

References