TI-2017-08912 Aliases CVE-2017-12119 GHSA-p4g7-mgvx-4rmf

Improper check for unusual conditions in Talos CPP-Ethereum

LOW 37CWE-754Published 2018-01-19 · Updated 2024-09-17

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability.

Why it matters now

EPSS 0.02086 81st percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Talos	CPP-Ethereum	Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768	—	No fix listed	CNA

CPP-Ethereum VendorTalos Affected Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ethereum:cpp-ethereum:-:::::::*	not specified by NVD	Vulnerable	ethereum

cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ethereum

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2017-12119
2026-10-03 Alias added: GHSA-p4g7-mgvx-4rmf

References

Exploit 1

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0471

TI-2017-08911 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08910 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08908 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08906 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08905 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08907 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences