CVSS 3.1
5.7 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:HCVE-2021-41173
Medium (5.7) in ethereum go ethereum. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in github.com/ethereum/go-ethereum 1.10.9.
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ethereum:go_ethereum
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-59hh-656j-3p7v | Go | github.com/ethereum/go-ethereum | <1.10.9 | 1.10.9 |
| GO-2022-0256 | Go | github.com/ethereum/go-ethereum | <1.10.9 | 1.10.9 |
References
- https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738
- https://github.com/ethereum/go-ethereum/pull/23801
- https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v
- https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738