Priority HIGH 72
Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a crafted GraphQL query.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01177 · Published 2023-10-18 · No fix listed CWE-400
Priority MEDIUM 45
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00659 · Published 2026-02-19 · Fixed in 1.16.9 CWE-20
Priority MEDIUM 41
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01121 · Published 2023-09-06 · Fixed in 1.12.1-stable CWE-400
Priority MEDIUM 40
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04255 · Published 2018-07-05 · Fixed in 1.8.11 CWE-129
Priority LOW 37
go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00507 · Published 2026-02-19 · Fixed in 1.16.9 CWE-203
Priority LOW 37
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00651 · Published 2026-02-19 · Fixed in 1.17.0 CWE-770
Priority LOW 37
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01863 · Published 2020-11-25 · Fixed in 1.9.24 CWE-682
Priority LOW 36
A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, whic…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01373 · Published 2022-03-04 · No fix listed CWE-400
Priority LOW 36
A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01373 · Published 2022-03-04 · No fix listed CWE-400
Priority LOW 36
go-ethereum is the official Go implementation of the Ethereum protocol.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01325 · Published 2021-08-24 · Fixed in 1.10.8 CWE-436
Priority LOW 36
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0148 · Published 2020-11-25 · Fixed in 1.9.18, 1.1.1 CWE-125
Priority LOW 36
Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01456 · Published 2018-12-24 · No fix listed CWE-770
Priority LOW 36
cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01469 · Published 2018-11-12 · Fixed in 1.8.14 CWE-476
Priority LOW 35
Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01197 · Published 2022-03-16 · No fix listed CWE-400
Priority LOW 35
In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01215 · Published 2018-09-08 · Fixed in 1.8.14 CWE-20
Priority LOW 34
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01226 · Published 2020-11-25 · Fixed in 1.9.17 CWE-682
Priority LOW 33
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01886 · Published 2020-12-11 · Fixed in 1.9.25 CWE-400
Priority LOW 32
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00625 · Published 2026-01-13 · Fixed in 1.16.8 CWE-20
Priority LOW 32
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00727 · Published 2026-01-13 · Fixed in 1.16.8 CWE-20
Priority LOW 29
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Risk…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01271 · Published 2022-08-05 · No fix listed
Priority LOW 29
Go Ethereum is the official Golang implementation of the Ethereum protocol.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-05-20 · Fixed in 1.10.17 CWE-400
Priority LOW 28
Go Ethereum is the official Golang implementation of the Ethereum protocol.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.01242 · Published 2021-10-26 · Fixed in 1.10.9 CWE-20
Priority LOW 26
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0092 · Published 2020-12-11 · Fixed in 1.9.20 CWE-682
Priority LOW 24
Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2021-11-18 · No fix listed CWE-476