{"action":"Upgrade github.com/ethereum/go-ethereum to 1.8.11 or later.","affected":[{"fixed":"1.8.11","introduced":"0"}],"component":"github.com/ethereum/go-ethereum","cve_ids":["CVE-2018-12018"],"ecosystem":"Go","epss":0.04255,"exploited":false,"fixed_versions":["1.8.11"],"ghsa_id":"GHSA-p5gc-957x-gfw9","id":"tcs_01M5KFGWZM9D665XWRE3FVYY9N","modified_at":"2024-05-20T19:55:50Z","published_at":"2022-05-14T03:01:31Z","references":["https://osv.dev/vulnerability/GHSA-p5gc-957x-gfw9","https://nvd.nist.gov/vuln/detail/CVE-2018-12018","https://github.com/ethereum/go-ethereum/pull/16891","https://github.com/ethereum/go-ethereum/commit/a5237a27eaf81946a3edb4fafe13ed6359d119e4","https://github.com/ethereum/go-ethereum","https://github.com/ethereum/go-ethereum/releases/tag/v1.8.11","https://peckshield.com/2018/06/27/EPoD","https://pkg.go.dev/vuln/GO-2021-0075","https://web.archive.org/web/20180628022133/https://peckshield.com/2018/06/27/EPoD"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p5gc-957x-gfw9","url":"https://osv.dev/vulnerability/GHSA-p5gc-957x-gfw9"}],"summary":"Go Ethereum LES protocol implementation vulnerable to Denial of Service"}