Go/github.com/ethereum/go-ethereum CVE-2024-32972: high 7.5, EPSS 0.85%
go-ethereum vulnerable to DoS via malicious p2p message
Action: Upgrade github.com/ethereum/go-ethereum to 1.13.15 or later.
go get github.com/ethereum/go-ethereum@v1.13.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.15 | - |
Fixed versions
| 1.13.15 |
Sources
- osv: GHSA-4xc9-8hmq-j652
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-4xc9-8hmq-j652
- https://nvd.nist.gov/vuln/detail/CVE-2024-32972
- https://github.com/advisories/GHSA-4xc9-8hmq-j652
- https://github.com/ethereum/go-ethereum
- https://github.com/ethereum/go-ethereum/compare/v1.13.14...v1.13.15
CVE-2024-32972 · published · modified · JSON