Vulnerabilities

TI-2026-21271 CVE-2026-26315 · GHSA-m6j8-rg6r-7mv8

Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake

LOW 37

go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00507 Published 2026-02-19 Fixed in 1.16.9 CWE-203

TI-2026-21270 CVE-2026-26314 · GHSA-2gjw-fg97-vg3r

Go Ethereum affected by DoS via malicious p2p message

MEDIUM 45

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00659 Published 2026-02-19 Fixed in 1.16.9 CWE-20

TI-2026-21269 CVE-2026-26313 · GHSA-689v-6xwf-5jf3

Go Ethereum affected by DoS via malicious p2p message

LOW 37

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00651 Published 2026-02-19 Fixed in 1.17.0 CWE-770

TI-2026-18360 CVE-2026-22868 · GHSA-mq3p-rrmp-79jg

go-ethereum has a DoS via malicious p2p message

LOW 32

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00625 Published 2026-01-13 Fixed in 1.16.8 CWE-20

TI-2026-18354 CVE-2026-22862 · GHSA-mr7q-c9w9-wh4h

go-ethereum has a DoS via malicious p2p message

LOW 32

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00727 Published 2026-01-13 Fixed in 1.16.8 CWE-20

TI-2023-22561 CVE-2023-42319 · GHSA-v9jh-j8px-98vq

Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote…

HIGH 72

Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a crafted GraphQL query.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01177 Published 2023-10-18 No fix listed CWE-400

TI-2023-21389 CVE-2023-40591 · GHSA-ppjg-v974-84cm

Denial of service via malicious p2p message in go-ethereum

MEDIUM 41

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01121 Published 2023-09-06 Fixed in 1.12.1-stable CWE-400

TI-2022-17504 CVE-2022-37450 · GHSA-rqmg-hrg4-fm69

Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining…

LOW 29

Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Risk…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01271 Published 2022-08-05 No fix listed

TI-2022-11720 CVE-2022-29177 · GHSA-wjxw-gh3m-7pm5

DoS via malicious p2p message in Go-Ethereum

LOW 29

Go Ethereum is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01155 Published 2022-05-20 Fixed in 1.10.17 CWE-400

TI-2021-18677 CVE-2021-42219 · GHSA-vrcc-g6vj-mh5w

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a…

LOW 35

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01197 Published 2022-03-16 No fix listed CWE-400

TI-2022-07441 CVE-2022-23328 · GHSA-vmf7-hmh6-vv57

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending…

LOW 36

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, whic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01373 Published 2022-03-04 No fix listed CWE-400

TI-2022-07440 CVE-2022-23327 · GHSA-pvx3-gm3c-gmpr

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send…

LOW 36

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01373 Published 2022-03-04 No fix listed CWE-400

TI-2021-19507 CVE-2021-43668 · GHSA-5m8f-chrv-7rw5

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages…

LOW 24

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00259 Published 2021-11-18 No fix listed CWE-476

TI-2021-18012 CVE-2021-41173 · GHSA-59hh-656j-3p7v

DoS via maliciously crafted p2p message

LOW 28

Go Ethereum is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01242 Published 2021-10-26 Fixed in 1.10.9 CWE-20

TI-2021-16524 CVE-2021-39137 · GHSA-9856-9gg9-qcmq

Consensus flaw during block processing in go-ethereum

LOW 36

go-ethereum is the official Go implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01325 Published 2021-08-24 Fixed in 1.10.8 CWE-436

TI-2020-16085 CVE-2020-26264 · GHSA-r33q-22hv-j29q

LES Server DoS via GetProofsV2

LOW 33

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01886 Published 2020-12-11 Fixed in 1.9.25 CWE-400

TI-2020-16086 CVE-2020-26265 · GHSA-xw37-57qp-9mm4

Consensus flaw during block processing

LOW 26

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0092 Published 2020-12-11 Fixed in 1.9.20 CWE-682

TI-2020-16061 CVE-2020-26240 · GHSA-v592-xf75-856p

Erroneous Proof of Work calculation in geth

LOW 37

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01863 Published 2020-11-25 Fixed in 1.9.24 CWE-682

TI-2020-16062 CVE-2020-26241 · GHSA-69v6-xc2j-r2jf

Shallow copy bug in geth

LOW 34

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01226 Published 2020-11-25 Fixed in 1.9.17 CWE-682

TI-2020-16063 CVE-2020-26242 · GHSA-jm5c-rv3w-w83m

Denial of service in geth

LOW 36

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0148 Published 2020-11-25 Fixed in 1.9.18, 1.1.1 CWE-125

TI-2018-14466 CVE-2018-20421 · GHSA-5g4w-3m99-4m2p

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory…

LOW 36

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01456 Published 2018-12-24 No fix listed CWE-770

TI-2018-13606 CVE-2018-19184 · GHSA-9h4h-8w5p-f28w

cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of…

LOW 36

cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01469 Published 2018-11-12 Fixed in 1.8.14 CWE-476

TI-2018-11983 CVE-2018-16733 · GHSA-qr2j-wrhx-4829

In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify…

LOW 35

In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01215 Published 2018-09-08 Fixed in 1.8.14 CWE-20

TI-2018-08612 CVE-2018-12018 · GHSA-p5gc-957x-gfw9

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka…

MEDIUM 40

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04255 Published 2018-07-05 Fixed in 1.8.11 CWE-129

Vulnerabilities

Filters